VYPR
← All advisories
Medium severity6.4NVD Advisory· Published Apr 9, 2020· Updated Jun 17, 2026

CVE-2020-7922

CVE-2020-7922

Description

X.509 certificates generated by the MongoDB Enterprise Kubernetes Operator may allow an attacker with access to the Kubernetes cluster improper access to MongoDB instances. Customers who do not use X.509 authentication, and those who do not use the Operator to generate their X.509 certificates are unaffected. This issue affects MongoDB Enterprise Kubernetes Operator version 1.0, MongoDB Enterprise Kubernetes Operator version 1.1, MongoDB Enterprise Kubernetes Operator version 1.2 versions prior to 1.2.4, MongoDB Enterprise Kubernetes Operator version 1.3 versions prior to 1.3.1, 1.2, 1.4 versions prior to 1.4.4.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

5
  • MongoDB Inc./MongoDB Enterprise Kubernetes Operatorv5
    Range: 1.0
  • MongoDB/Enterprise Kubernetes Operatorllm-fuzzy
    Range: <1.2.4, <1.3.1, <1.4.4
  • MongoDB/Mongodb Enterprise Kubernetes Operator3 versions
    cpe:2.3:a:mongodb:mongodb_enterprise_kubernetes_operator:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:mongodb:mongodb_enterprise_kubernetes_operator:*:*:*:*:*:*:*:*range: >=1.2.0,<=1.2.4
    • cpe:2.3:a:mongodb:mongodb_enterprise_kubernetes_operator:1.0:*:*:*:*:*:*:*
    • cpe:2.3:a:mongodb:mongodb_enterprise_kubernetes_operator:1.1:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.