Description (CNA)
Applications built on MongoDB Entity Framework Core Provider which combine independent encryption settings and this provider's encryption settings may silently lose TLS and schema-map settings leading to protected fields being stored unencrypted in the database.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| MongoDB Inc. / MongoDB Entity Framework Core Provider | affected 8.0.0 before 8.4.3; affected 9.0.0 before 9.1.3; affected 10.0.0 before 10.0.3 |
CWE
CWE-311
References
ADP enrichment
No English description supplied.
No references supplied.