Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: MongoDB Server 5.0.31, 6.0.20 and 2 more versions Clear all filters
TI-2025-02695 CVE-2025-3085 · GHSA-v8j7-gw8h-m2j4

MongoDB Server running on Linux may allow unexpected connections where intermediate certificates are revoked

Priority MEDIUM 43

A MongoDB server under specific conditions running on Linux with TLS and CRL revocation status checking enabled, fails to check the revocation status of the intermediate certificates in the peer's certificate chain.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00287 Published 2025-04-01 Fixed in 5.0.31, 6.0.20 +2 CWE-299