VYPR
← All advisories
Unrated severityNVD Advisory· Published Aug 8, 2023· Updated Feb 13, 2025

Privilege Escalation for Project Owner and Project User Admin Roles in Ops Manager

CVE-2023-4009

Description

In MongoDB Ops Manager v5.0 prior to 5.0.22 and v6.0 prior to 6.0.17 it is possible for an authenticated user with project owner or project user admin access to generate an API key with the privileges of org owner resulting in privilege escalation.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Pivot/Ops Managerllm-fuzzy
    Range: >=5.0 <5.0.22, >=6.0 <6.0.17
  • MongoDB Inc./MongoDB Ops Managerv5
    Range: 6.0

Patches

Vulnerability mechanics

No source-code context for this CVE — mechanics is only generated when we can read the actual fix diff. Without that, the four sections (root cause, attack vector, affected code, fix) would be speculation rather than analysis.

References

3

News mentions

0

No linked articles in our index yet.