Showing 1 - 1 of 1

CVE-2019-2386

Status Candidate

Overview

After user deletion in MongoDB Server the improper invalidation of authorization sessions allows an authenticated user's session to persist and become conflated with new accounts, if those accounts reuse the names of deleted ones. This issue affects: MongoDB Inc. MongoDB Server v4.0 versions prior to 4.0.9; v3.6 versions prior to 3.6.13; v3.4 versions prior to 3.4.22.

Related Files

Ubuntu Security Notice USN-5052-1: Posted Aug 26, 2021; Authored by Ubuntu | Site security.ubuntu.com; Ubuntu Security Notice 5052-1 - MongoDB would fail to properly invalidate existing sessions for deleted users. This could allow a remote authenticated attacker to gain elevated privileges if their user account was recreated with elevated privileges.; tags | advisory, remote; systems | linux, ubuntu; advisories | CVE-2019-2386; SHA-256 | 0ea9b9b187dca2bf7ba1f179a3b10563d15e3a5471c3875c0a889c5422cc0083; Download | Favorite | View

Page 1 of 1 Back 1 Next

Top Authors In Last 30 Days

Red Hat 107 files
Ubuntu 104 files
Debian 21 files
Google Security Research 11 files
LiquidWorm 10 files
Muhammad Navaid Zafar Ansari 7 files
Abdulhakim Oner 6 files
Jann Horn 5 files
fearzzzz 5 files
nu11secur1ty 5 files

File Archives

Systems

AIX (426)
Apple (1,951)
BSD (370)
CentOS (56)
Cisco (1,919)
Debian (6,711)
Fedora (1,691)
FreeBSD (1,242)
Gentoo (4,288)
HPUX (878)
iOS (338)
iPhone (108)
IRIX (220)
Juniper (67)
Linux (45,070)
Mac OS X (684)
Mandriva (3,105)
NetBSD (256)
OpenBSD (482)
RedHat (12,879)
Slackware (941)
Solaris (1,609)
SUSE (1,444)
Ubuntu (8,435)
UNIX (9,207)
UnixWare (185)
Windows (6,530)
Other

CVE-2019-2386

Overview

Related Files

File Archive:

March 2023

Top Authors In Last 30 Days

File Tags

File Archives

Systems