Red Hat Security Advisory

RHSA-2014:0230

mongodb security update

Released 2014-03-04 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux OpenStack Platform 4.0 libmongodb-2.2.4-4.el6ost, mongodb-2.2.4-4.el6ost, mongodb-server-2.2.4-4.el6ost

Fixes 1 record

TI-2012-05337 CVE-2012-6619 · GHSA-7gm2-h58c-936h

The default configuration for MongoDB before 2.3.2 does not validate objects, which…

LOW 35

The default configuration for MongoDB before 2.3.2 does not validate objects, which allows remote authenticated users to cause a denial of service (crash) or read system memory via a crafted BSON object in the column nam…

CVSS 2.0MEDIUM 6.4 Network No auth Interaction — EPSS 0.03894 Published 2014-03-06 Partial fix CWE-20