VDB
CVE-2024-8207
CVE-2024-8207
PUBLISHED
CVSS 6.699999809265137 MEDIUM
In certain highly specific configurations of the host system and MongoDB server binary installation on Linux Operating Systems, it may be possible for a unintended actor with host-level access to cause the MongoDB Server binary to load unintended actor-controlled shared libraries when the server binary is started, potentially resulting in the unintended actor gaining full control over the MongoDB server process. This issue affects MongoDB Server v5.0 versions prior to 5.0.14 and MongoDB Server v6.0 versions prior to 6.0.3. Required Configuration: Only environments with Linux as the underlying operating system is affected by this issue
EPSS 0.20% · 10.2th percentile
Risk Scores
CVSS 3.1
6.699999809265137
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
EPSS Score
0.20%
10.2th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Bitnami | mongodb | 5.0.0, 6.0.0, 6.1.0 |
| Bitnami | mongodb | 5.0.0, 6.0.0, 6.1.0 |
Timeline
- Aug 27, 2024 CVE Published
- Aug 28, 2024 EPSS Score
- Sep 17, 2024 EPSS Score
- Oct 5, 2024 Coalition ESS Score
- Oct 8, 2024 EPSS Score
- Oct 28, 2024 EPSS Score
- Nov 18, 2024 EPSS Score
- Dec 9, 2024 EPSS Score
- Dec 29, 2024 EPSS Score
- Jan 19, 2025 EPSS Score
- Feb 8, 2025 EPSS Score
- Feb 28, 2025 EPSS Score