Users with appropriate file access may be able to access unencrypted user credentials saved by MongoDB Extension for VS Code in a binary file. These credentials may be used by malicious attackers to perform unauthorized actions. This vulnerability affects all MongoDB Extension for VS Code including and prior to version 0.7.0
Metrics
Affected Vendors & Products
References
History
Wed, 18 Sep 2024 08:30:00 +0000
Type | Values Removed | Values Added |
---|---|---|
CPEs | cpe:2.3:a:mongodb:mongodb:-:*:*:*:*:*:*:* | |
Metrics |
ssvc
|
Tue, 17 Sep 2024 02:00:00 +0000
Type | Values Removed | Values Added |
---|---|---|
Description | Users with appropriate file access may be able to access unencrypted user credentials saved by MongoDB Extension for VS Code in a binary file. These credentials may be used by malicious attackers to perform unauthorized actions. This vulnerability affects all MongoDB Extension for VS Code including and prior to version 0.7.0 | Users with appropriate file access may be able to access unencrypted user credentials saved by MongoDB Extension for VS Code in a binary file. These credentials may be used by malicious attackers to perform unauthorized actions. This vulnerability affects all MongoDB Extension for VS Code including and prior to version 0.7.0 |
MITRE
Status: PUBLISHED
Assigner: mongodb
Published: 2022-01-20T14:50:10.319200Z
Updated: 2024-09-17T01:51:09.452Z
Reserved: 2021-05-05T00:00:00
Link: CVE-2021-32039
Vulnrichment
Updated: 2024-08-03T23:17:28.896Z
NVD
Status : Modified
Published: 2022-01-20T15:15:07.893
Modified: 2024-11-21T06:06:45.610
Link: CVE-2021-32039
Redhat
No data.