Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Potential privilege escalation in Ops Manager API
Vulnerability Description
Specially crafted API calls may allow an authenticated user who holds Organization Owner privilege to obtain an API key with Global Role privilege. This issue affects MongoDB Ops Manager v4.2 versions prior to and including 4.2.17, MongoDB Ops Manager v4.3 versions prior to and including 4.3.9 and MongoDB Ops Manager v4.4 versions prior to and including 4.4.2.
CVSS Information
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Vulnerability Type
特权API的不正确使用
Vulnerability Title
Mongodb Ops Manager 授权问题漏洞
Vulnerability Description
Mongodb Ops Manager是美国Mongodb公司的一套支持管理、监视和备份MongoDB部署的解决方案。 MongoDB Ops Manager 存在安全漏洞，该漏洞源于特殊设计的API调用可能允许持有组织所有者特权的经过身份验证的用户获得具有全局角色特权的API密钥。以下产品及版本受到影响：MongoDB Ops Manager v4.2版本4.2.0-4.2.17、v4.3版本4.3.0-4.3.9和v4.4版本4.4.0-4.4.2。
CVSS Information
N/A
Vulnerability Type
N/A