Vulnerabilidades de MongoDB Schema Builder CLI (CVE)

Registros CVE publicados para MongoDB Schema Builder CLI, los más recientes primero. Siga el producto para recibir un correo con cada nueva.

2 resultados

4.8Media

CVE-2026-19503 hace 3 meses

Insufficient OIDC endpoint validation could invoke unintended local protocol handlers

MongoDB Atlas SQL ODBC Driver; MongoDB Schema Builder CLI

MongoDB Schema Manager and MongoDB Atlas SQL ODBC Driver do not validate the scheme of the authorization and token endpoints returned by an OIDC issuer's discovery document. A user induced to connect to an uncontrolled MongoDB deployment using MONGODB-OIDC au…

5.5Media

CVE-2026-19502 hace 3 meses

Insufficient redaction of sensitive configuration values in diagnostic output of MongoDB SQL Schema Builder CLI

MongoDB Schema Builder CLI

MongoDB SQL Schema Builder CLI records its startup configuration to standard output and, when file logging is enabled, to a log file on disk. Certain connection settings were written without redaction, so authentication material supplied by the operator could…