Executive Summary

Informations
Name CVE-2024-8207 First vendor Publication 2024-08-27
Vendor Cve Last vendor Modification 2024-08-30

Security-Database Scoring CVSS v3

Cvss vector : CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Overall CVSS Score 6.7
Base Score 6.7 Environmental Score 6.7
impact SubScore 5.9 Temporal Score 6.7
Exploitabality Sub Score 0.8
 
Attack Vector Local Attack Complexity Low
Privileges Required High User Interaction None
Scope Unchanged Confidentiality Impact High
Integrity Impact High Availability Impact High
Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector :
Cvss Base Score N/A Attack Range N/A
Cvss Impact Score N/A Attack Complexity N/A
Cvss Expoit Score N/A Authentication N/A
Calculate full CVSS 2.0 Vectors scores

Detail

In certain highly specific configurations of the host system and MongoDB server binary installation on Linux Operating Systems, it may be possible for a unintended actor with host-level access to cause the MongoDB Server binary to load unintended actor-controlled shared libraries when the server binary is started, potentially resulting in the unintended actor gaining full control over the MongoDB server process. This issue affects MongoDB Server v5.0 versions prior to 5.0.14 and MongoDB Server v6.0 versions prior to 6.0.3.

Required Configuration: Only environments with Linux as the underlying operating system is affected by this issue

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-8207

CWE : Common Weakness Enumeration

% Id Name
100 % CWE-610 Externally Controlled Reference to a Resource in Another Sphere

CPE : Common Platform Enumeration

TypeDescriptionCount
Application 160

Sources (Detail)

https://jira.mongodb.org/browse/SERVER-69507
Source Url

Alert History

If you want to see full details history, please login or register.
0
1
2
Date Informations
2024-11-08 02:58:43
  • Multiple Updates
2024-08-30 17:27:27
  • Multiple Updates
2024-08-27 17:27:26
  • First insertion