VDB
CVE-2024-8207
CVE-2024-8207
PUBLISHED
CVSS 6.699999809265137 MEDIUM
In certain highly specific configurations of the host system and MongoDB server binary installation on Linux Operating Systems, it may be possible for a unintended actor with host-level access to cause the MongoDB Server binary to load unintended actor-controlled shared libraries when the server binary is started, potentially resulting in the unintended actor gaining full control over the MongoDB server process. This issue affects MongoDB Server v5.0 versions prior to 5.0.14 and MongoDB Server v6.0 versions prior to 6.0.3. Required Configuration: Only environments with Linux as the underlying operating system is affected by this issue
EPSS 0.21% · 9.9th percentile
Risk Scores
CVSS 3.1
6.699999809265137
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
EPSS Score
0.21%
9.9th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Bitnami | mongodb | 5.0.0, 6.0.0, 6.1.0 |
| Bitnami | mongodb | 5.0.0, 6.0.0, 6.1.0 |
Timeline
- Aug 27, 2024 CVE Published
- Aug 28, 2024 EPSS Score
- Sep 18, 2024 EPSS Score
- Oct 5, 2024 Coalition ESS Score
- Oct 8, 2024 EPSS Score
- Oct 29, 2024 EPSS Score
- Nov 19, 2024 EPSS Score
- Dec 11, 2024 EPSS Score
- Dec 31, 2024 EPSS Score
- Jan 21, 2025 EPSS Score
- Feb 11, 2025 EPSS Score
- Mar 4, 2025 EPSS Score