CVE-2025-6711 — Incomplete Redaction of Sensitive Information in MongoDB Server Logs

CVE-2025-6711

Incomplete Redaction of Sensitive Information in MongoDB Server Logs PUBLISHED

Description (CNA)

An issue has been identified in MongoDB Server where unredacted queries may inadvertently appear in server logs when certain error conditions are encountered. This issue affects MongoDB Server v8.0 versions prior to 8.0.5, MongoDB Server v7.0 versions prior to 7.0.18 and MongoDB Server v6.0 versions prior to 6.0.21.

Affected (CNA)

Vendor / product	Versions
MongoDB Inc / MongoDB Server	affected 6.0 before 6.0.21; affected 7.0 before 7.0.18; affected 8.0 before 8.0.5

CWE

CWE-532

References

https://jira.mongodb.org/browse/SERVER-98720

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.