← Back

CVE-2023-0342

nvd nist
Published: Jun 9, 2023Modified: Feb 25, 2026

JSON object

Loading...
5.3
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Exploitability: 3.9 / Impact: 1.4
Source: NVD

Description

MongoDB Ops Manager Diagnostics Archive may not redact sensitive PEM key file password app settings. Archives do not include the PEM files themselves. This issue affects MongoDB Ops Manager v5.0 prior to 5.0.21 and MongoDB Ops Manager v6.0 prior to 6.0.12

Affected (2)

Mongodb
1 product
Ops Manager Server
Configuration A
2 vulnerable
Vulnerable SoftwareAffected Versions
Mongodb
Ops Manager Server
From 5.0.0 to 5.0.21
Ops Manager Server
From 6.0.0 to 6.0.12

Related CWEs

CWE-497
Exposure of Sensitive System Information to an Unauthorized Control Sphere
The product does not properly prevent sensitive system-level information from being accessed by unauthorized actors who do not have the same level of access to the underlying system as the product does.

References (4)

Source: cna@mongodb.com
Release Notes
Source: cna@mongodb.com
Release Notes
Source: af854a3a-2127-422b-91ae-364da2661108
Release Notes
Source: af854a3a-2127-422b-91ae-364da2661108
Release Notes

Timeline

No history available yet.