Descrição
In MongoDB Connector for BI, mongodrdl may write a TLS private-key password to standard error when the password is supplied through both the connection URI and the corresponding command-line option. A local user with access to the captured command output and encrypted key file may use the disclosed password to access the associated TLS client key.
CVSS 4.4EPSS 0.09%Risco 0.44
Ver fonte- Publicação
- 2026-08-27 17:19:59
- Versões afetadas
- unknown
- Tipo
- Biblioteca
- Última alteração
- 2026-08-27 20:18:37
- Vetor
- CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N