CVE-2023-0342
Low
Description
MongoDB Ops Manager Diagnostics Archive may not redact sensitive PEM key file password app settings. Archives do not include the PEM files themselves. This issue affects MongoDB Ops Manager v5.0 prior to 5.0.21 and MongoDB Ops Manager v6.0 prior to 6.0.12
SeverityLow
CVSS3.1
Exploit probability—
Product
Mongodb Ops Manager Server
PublishedJun 9, 2023
First seenJun 9, 2023
Weakness typeCWE-497CWE-497
How to fix
Update
- mongodb ops_manager_server5.0.21, 6.0.12 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mongodb ops_manager_server | 5.0.0 ≤ v < 5.0.21, 6.0.0 ≤ v < 6.0.12 | 5.0.21, 6.0.12 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.