ID de Prueba:	1.3.6.1.4.1.25623.1.0.809351
Categoría:	Databases
Título:	MongoDB Client 'dbshell' Information Disclosure Vulnerability (SERVER-25335) - Windows
Resumen:	MongoDB is prone to an information disclosure vulnerability.
Descripción:	Summary: MongoDB is prone to an information disclosure vulnerability. Vulnerability Insight: The Flaw is due to mongodb-clients stores its history in '~ /.dbshell', this file is created with permissions 0644. Home folders are world readable as well. Vulnerability Impact: Successful exploitation will allow local users to obtain sensitive information by reading .dbshell history files. Affected Software/OS: MongoDB version 2.4.10 and probably earlier. Solution: Update to version 3.0, 3.2, 3.3.14 or later. CVSS Score: 2.1 CVSS Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Referencia Cruzada:	BugTraq ID: 92204 Common Vulnerability Exposure (CVE) ID: CVE-2016-6494 http://www.securityfocus.com/bid/92204 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5MCE2ZLFBNOK3TTWSTXZJQGZVP4EEJDL/ http://www.openwall.com/lists/oss-security/2016/07/29/4 http://www.openwall.com/lists/oss-security/2016/07/29/8
Copyright	Copyright (C) 2016 Greenbone Networks GmbH

Esta es sólo una de 99761 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.