An authenticated user without any specific authorizations may be able to repeatedly invoke the features command where at a high volume may lead to resource depletion or generate high lock contention. This may result in denial of service and in rare cases could result in id field collisions. This issue affects MongoDB Server v5.0 versions prior to and including 5.0.3; MongoDB Server v4.4 versions prior to and including 4.4.9; MongoDB Server v4.2 versions prior to and including 4.2.16 and MongoDB Server v4.0 versions prior to and including 4.0.28
History

Tue, 19 Nov 2024 20:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}


Tue, 17 Sep 2024 04:30:00 +0000

Type Values Removed Values Added
Description An authenticated user without any specific authorizations may be able to repeatedly invoke the features command where at a high volume may lead to resource depletion or generate high lock contention. This may result in denial of service and in rare cases could result in id field collisions. This issue affects MongoDB Server v5.0 versions prior to and including 5.0.3; MongoDB Server v4.4 versions prior to and including 4.4.9; MongoDB Server v4.2 versions prior to and including 4.2.16 and MongoDB Server v4.0 versions prior to and including 4.0.28 An authenticated user without any specific authorizations may be able to repeatedly invoke the features command where at a high volume may lead to resource depletion or generate high lock contention. This may result in denial of service and in rare cases could result in id field collisions. This issue affects MongoDB Server v5.0 versions prior to and including 5.0.3; MongoDB Server v4.4 versions prior to and including 4.4.9; MongoDB Server v4.2 versions prior to and including 4.2.16 and MongoDB Server v4.0 versions prior to and including 4.0.28

cve-icon MITRE

Status: PUBLISHED

Assigner: mongodb

Published: 2022-02-04T22:33:08.292976Z

Updated: 2024-11-19T19:12:46.061Z

Reserved: 2021-05-05T00:00:00

Link: CVE-2021-32036

cve-icon Vulnrichment

Updated: 2024-08-03T23:17:29.135Z

cve-icon NVD

Status : Modified

Published: 2022-02-04T23:15:11.490

Modified: 2024-11-21T06:06:45.330

Link: CVE-2021-32036

cve-icon Redhat

Severity : Moderate

Publid Date: 2022-02-05T11:41:00Z

Links: CVE-2021-32036 - Bugzilla