A security issue exists in MongoDB's LDAP authorization integration where pooled LDAP connections can retain stale authentication identities after user authentication under certain configurations. Subsequent authorization queries may execute under an unintended LDAP identity rather than the expected one. This can result in incorrect role assignments based on the LDAP directory's access control configuration, potentially allowing an authenticated user to acquire elevated privileges that were not intended by the deployment's authorization policy.
Attack Parameters
Attack Vector
Network
Can be exploited remotely
Attack Complexity
Low
Easy to exploit
Attack Requirements
Present
Additional conditions required
Privileges Required
Low
Basic privileges needed
User Interaction
None
No user interaction needed
Impact Assessment
Confidentiality
High
Complete data leak
Integrity
High
Complete data modification
Availability
None
No disruption
CVSS Vector v4.0
Weakness Type (CWE)
Vulnerable Products 6
| Configuration | From (including) | Up to (excluding) |
|---|---|---|
|
Mongodb Mongodb
cpe:2.3:a:mongodb:mongodb:*:*:*:*:*:*:*:*
|
7.0.0
|
7.0.41
|
|
Mongodb Mongodb
cpe:2.3:a:mongodb:mongodb:*:*:*:*:*:*:*:*
|
8.0.0
|
8.0.30
|
|
Mongodb Mongodb
cpe:2.3:a:mongodb:mongodb:*:*:*:*:*:*:*:*
|
8.2.0
|
<= 8.2.12
|
|
Mongodb Mongodb
cpe:2.3:a:mongodb:mongodb:*:*:*:*:*:*:*:*
|
8.3.0
|
8.3.9
|
|
Mongodb Mongodb
cpe:2.3:a:mongodb:mongodb:9.0.0:alpha0:*:*:-:-:*:*
|
— | — |
|
Mongodb Mongodb
cpe:2.3:a:mongodb:mongodb:9.0.0:alpha1:*:*:-:-:*:*
|
— | — |