跳转到帖子

MongoDB: Unspecified Security Vulnerability (CVE-2024-6384)

recommended_posts

发布于
  • Members

MongoDB: Unspecified Security Vulnerability (CVE-2024-6384)

Severity
6
CVSS
(AV:N/AC:M/Au:S/C:C/I:N/A:N)
Published
08/13/2024
Created
08/20/2024
Added
08/19/2024
Modified
01/30/2025

Description

"Hot" backup files may be downloaded by underprivileged users, if they are capable of acquiring a unique backup identifier. This issue affects MongoDB Enterprise Server v6.0 versions prior to 6.0.16, MongoDB Enterprise Server v7.0 versions prior to 7.0.11 and MongoDB Enterprise Server v7.3 versions prior to 7.3.3

Solution(s)

  • mongodb-upgrade-6_0_16
  • mongodb-upgrade-7_0_11
  • mongodb-upgrade-7_3_3

References

  • https://attackerkb.com/topics/cve-2024-6384
  • CVE - 2024-6384
  • https://jira.mongodb.org/browse/SERVER-93516
  • https://security.netapp.com/advisory/ntap-20241115-0001/
  • 查看数 695
  • 已创建
  • 最后回复

参与讨论

你可立刻发布并稍后注册。 如果你有帐户,立刻登录发布帖子。

游客
回帖…