VYPR
← All advisories
Unrated severityNVD Advisory· Published Jun 9, 2023· Updated Jan 6, 2025

MongoDB Ops Manager may disclose sensitive information in Diagnostic Archive

CVE-2023-0342

Description

MongoDB Ops Manager Diagnostics Archive may not redact sensitive PEM key file password app settings. Archives do not include the PEM files themselves. This issue affects MongoDB Ops Manager v5.0 prior to 5.0.21 and MongoDB Ops Manager v6.0 prior to 6.0.12

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Pivot/Ops Managerllm-fuzzy
    Range: >=5.0 <5.0.21, >=6.0 <6.0.12
  • MongoDB Inc./MongoDB Ops Managerv5
    Range: v5.0

Patches

Vulnerability mechanics

No source-code context for this CVE — mechanics is only generated when we can read the actual fix diff. Without that, the four sections (root cause, attack vector, affected code, fix) would be speculation rather than analysis.

References

2

News mentions

0

No linked articles in our index yet.