CVE-2015-7882: Authentication bypass when using LDAP authentication in MongoDB Enterprise Server
Published Jul 19, 2019
·Updated
Improper handling of LDAP authentication in MongoDB Server versions 3.0.0 to 3.0.6 allows an unauthenticated client to gain unauthorized access.
Affected Software
1 affected component
MongoDB MongoDB>=3.0.0<=3.0.6
Event History
Jul 19, 2019
CVE Published
via MITRE·03:44 PM
Data Sourced
via MITRE·03:44 PM
DescriptionSeverity
Frequently Asked Questions
1
What is the severity of CVE-2015-7882?
The severity of CVE-2015-7882 is high with a CVSS score of 8.1.
2
How does CVE-2015-7882 impact MongoDB Server versions 3.0.0 to 3.0.6?
CVE-2015-7882 allows an unauthenticated client to gain unauthorized access to MongoDB Server versions 3.0.0 to 3.0.6.
3
How can I fix the vulnerability in MongoDB Server versions 3.0.0 to 3.0.6?
To fix the vulnerability in MongoDB Server versions 3.0.0 to 3.0.6, it is recommended to upgrade to a version higher than 3.0.6.
4
What is the Common Vulnerabilities and Exposures (CVE) ID for this vulnerability?
The Common Vulnerabilities and Exposures (CVE) ID for this vulnerability is CVE-2015-7882.
5
What is the CWE ID for this vulnerability?
The CWE ID for this vulnerability is CWE-287.