CVE-2014-8180: Medium severity mongodb vulnerability
Jan Hutař of Red Hat reports:
MongoDB on Satellite 6 is configured without a password by default, this allows local users to connect to MongoDB and cause information to be deleted.
Other sources
MongoDB on Red Hat Satellite 6 allows local users to bypass authentication by logging in with an empty password and delete information which can cause a Denial of Service.
— MITRE
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2014-8180?
CVE-2014-8180 is considered a high severity vulnerability due to the potential for local users to manipulate and delete data without authentication.
How do I fix CVE-2014-8180?
The fix for CVE-2014-8180 involves configuring MongoDB to require a password for local users.
Who is affected by CVE-2014-8180?
CVE-2014-8180 affects installations of MongoDB configured without a password on Red Hat Satellite 6.
What are the potential risks of CVE-2014-8180?
The potential risks of CVE-2014-8180 include unauthorized access, data deletion, and loss of critical information by local users.
What software versions are impacted by CVE-2014-8180?
CVE-2014-8180 impacts MongoDB server versions integrated with Red Hat Satellite 6, specifically version 6.0.