MongoDB 2.4.x before 2.4.5 and 2.5.x before 2.5.1 allows remote authenticated users to obtain internal system privileges by leveraging a username of __system in an arbitrary database.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2013-07-04T10:00:00Z

Updated: 2024-09-16T23:11:11.616Z

Reserved: 2013-06-24T00:00:00Z

Link: CVE-2013-4650

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2013-07-04T14:33:41.667

Modified: 2024-11-21T01:55:59.240

Link: CVE-2013-4650

cve-icon Redhat

No data.