PT-2019-8316 · Edx+1 · Open Edx+1
CVE-2017-18381
·
Publicado
2019-07-30
·
Atualizado
2023-03-24
CVSS v3.1
7.2
Alta
| Vetor | AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Open edX versions prior to 2017-01-10
Description
The installation process exposes a MongoDB instance to external connections with default credentials. This issue may allow unauthorized access to the database.
Recommendations
For versions prior to 2017-01-10, update the installation process to secure the MongoDB instance with custom credentials and restrict external connections. As a temporary workaround, consider restricting access to the MongoDB instance until a secure configuration can be implemented.
Correção
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Mongodb
Open Edx