MongoDB Schema Builder CLI güvenlik açıkları (CVE)

MongoDB Schema Builder CLI için yayımlanan CVE kayıtları, en yenisi üstte. Yeni bir açık çıktığında e-posta almak için takip edin.

2 sonuç

4.8Orta

CVE-2026-19503 3 ay önce

Insufficient OIDC endpoint validation could invoke unintended local protocol handlers

MongoDB Atlas SQL ODBC Driver; MongoDB Schema Builder CLI

MongoDB Schema Manager and MongoDB Atlas SQL ODBC Driver do not validate the scheme of the authorization and token endpoints returned by an OIDC issuer's discovery document. A user induced to connect to an uncontrolled MongoDB deployment using MONGODB-OIDC au…

5.5Orta

CVE-2026-19502 3 ay önce

Insufficient redaction of sensitive configuration values in diagnostic output of MongoDB SQL Schema Builder CLI

MongoDB Schema Builder CLI

MongoDB SQL Schema Builder CLI records its startup configuration to standard output and, when file logging is enabled, to a log file on disk. Certain connection settings were written without redaction, so authentication material supplied by the operator could…