VYPR
Unrated severityNVD Advisory· Published Aug 13, 2024· Updated Nov 15, 2024

Backup files may be downloaded by underprivileged users in MongoDB Enterprise Server

CVE-2024-6384

Description

"Hot" backup files may be downloaded by underprivileged users, if they are capable of acquiring a unique backup identifier. This issue affects MongoDB Enterprise Server v6.0 versions prior to 6.0.16, MongoDB Enterprise Server v7.0 versions prior to 7.0.11 and MongoDB Enterprise Server v7.3 versions prior to 7.3.3

Affected products

1
  • cpe:2.3:a:mongodb:mongodb:6.0.0:*:*:*:enterprise:*:*:*
    Range: 6.0

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

1

News mentions

0

No linked articles in our index yet.