BIT-mongodb-2024-6384

vendorUSosv

view advisory published 2024-08-17Licence: per source

"Hot" backup files may be downloaded by underprivileged users, if they are capable of acquiring a unique backup identifier. This issue affects MongoDB Enterprise Server v6.0 versions prior to 6.0.16, MongoDB Enterprise Server v7.0 versions prior to 7.0.11 and MongoDB Enterprise Server v7.3 versions prior to 7.3.3

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2024-6384US	medium5.3	0.43% (37th)	—	2024-08-13
"Hot" backup files may be downloaded by underprivileged users, if they are capable of acquiring a unique backup identifier. This issue affects MongoDB Enterprise Server v6.0 versio…

references

External citations — patches, advisories, analysis.

https://jira.mongodb.org/browse/SERVER-93516WEB
https://security.netapp.com/advisory/ntap-20241115-0001/WEB

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan