Description
In MongoDB Connector for BI, mongodrdl may write a TLS private-key password to standard error when the password is supplied through both the connection URI and the corresponding command-line option. A local user with access to the captured command output and encrypted key file may use the disclosed password to access the associated TLS client key.
CVSS 4.4EPSS 0.09%Risk 0.44
View source- Published
- 2026-08-27 17:19:59
- Affected versions
- unknown
- Type
- Library
- Last modified
- 2026-08-27 20:18:37
- Vector
- CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N