Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Configuration may unexpectedly disable certificate validation
Vulnerability Description
When tlsInsecure=False appears in a connection string, certificate validation is disabled. This vulnerability affects MongoDB Rust Driver versions prior to v3.2.5
CVSS Information
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N
Vulnerability Type
证书验证不恰当
Vulnerability Title
MongoDB Rust Driver 安全漏洞
Vulnerability Description
MongoDB Rust Driver是MongoDB开源的一个让Rust程序连接MongoDB数据库的客户端库。 MongoDB Rust Driver v3.2.5之前版本存在安全漏洞，该漏洞源于禁用证书验证，可能导致中间人攻击。
CVSS Information
N/A
Vulnerability Type
N/A