MongoDB Schema Builder CLI Schwachstellen (CVE)

Für MongoDB Schema Builder CLI veröffentlichte CVE-Einträge, neueste zuerst. Folgen Sie, um bei neuen Einträgen eine E-Mail zu erhalten.

2 Ergebnisse

4.8Mittel

CVE-2026-19503 vor 3 Monaten

Insufficient OIDC endpoint validation could invoke unintended local protocol handlers

MongoDB Atlas SQL ODBC Driver; MongoDB Schema Builder CLI

MongoDB Schema Manager and MongoDB Atlas SQL ODBC Driver do not validate the scheme of the authorization and token endpoints returned by an OIDC issuer's discovery document. A user induced to connect to an uncontrolled MongoDB deployment using MONGODB-OIDC au…

5.5Mittel

CVE-2026-19502 vor 3 Monaten

Insufficient redaction of sensitive configuration values in diagnostic output of MongoDB SQL Schema Builder CLI

MongoDB Schema Builder CLI

MongoDB SQL Schema Builder CLI records its startup configuration to standard output and, when file logging is enabled, to a log file on disk. Certain connection settings were written without redaction, so authentication material supplied by the operator could…