← CVE Intelligence

CVE-2024-6384

Backup files may be downloaded by underprivileged users in MongoDB Enterprise Server PUBLISHED

Description (CNA)

"Hot" backup files may be downloaded by underprivileged users, if they are capable of acquiring a unique backup identifier. This issue affects MongoDB Enterprise Server v6.0 versions prior to 6.0.16, MongoDB Enterprise Server v7.0 versions prior to 7.0.11 and MongoDB Enterprise Server v7.3 versions prior to 7.3.3

Affected (CNA)

Vendor / productVersions
MongoDB Inc / MongoDB Serveraffected 6.0 before 6.0.16; affected 7.0 before 7.0.11; affected 7.3 before 7.3.3

CWE

CWE-285

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.