CVE-2015-7882

Authentication bypass when using LDAP authentication in MongoDB Enterprise Server

High · published July 19, 2019

CVSS v3.0
8.1
EPSS
2%
Percentile
77.6
In the wild
Unconfirmed
What it is

Improper handling of LDAP authentication in MongoDB Server versions 3.0.0 to 3.0.6 allows an unauthenticated client to gain unauthorized access.

The record
Technical detail
CVSS v3.0
8.1 · HIGH
Vector
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01756 · 77.6th percentile
Published
2019-07-19T15:44Z
EPSS history
Timeline
  • 19 JUL 15:44Z
    Authentication bypass when using LDAP authentication in MongoDB Enterprise Server
    cvelistv5