CVE-2013-4650: Medium severity MongoDB MongoDB vulnerability
Published Jul 4, 2013
·Updated
MongoDB 2.4.x before 2.4.5 and 2.5.x before 2.5.1 allows remote authenticated users to obtain internal system privileges by leveraging a username of system in an arbitrary database.
Affected Software
6 affected components
MongoDB MongoDB=2.4.0
MongoDB MongoDB=2.4.1
MongoDB MongoDB=2.4.2
MongoDB MongoDB=2.4.3
MongoDB MongoDB=2.4.4
MongoDB MongoDB=2.5.0
Event History
Jul 4, 2013
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2013-4650?
CVE-2013-4650 is considered a high severity vulnerability that can lead to unauthorized privilege escalation.
2
How do I fix CVE-2013-4650?
To fix CVE-2013-4650, upgrade your MongoDB installation to version 2.4.5 or 2.5.1 or later.
3
Who is affected by CVE-2013-4650?
Users of MongoDB versions 2.4.0 to 2.4.4 and 2.5.0 are affected by CVE-2013-4650.
4
What type of vulnerability is CVE-2013-4650?
CVE-2013-4650 is a privilege escalation vulnerability affecting MongoDB.
5
Can remote attackers exploit CVE-2013-4650?
Yes, remote authenticated users can exploit CVE-2013-4650 to gain internal system privileges.