CVE-2013-4650 | BDVDB-2026-56436 Detail

Description#

MongoDB 2.4.x before 2.4.5 and 2.5.x before 2.5.1 allows remote authenticated users to obtain internal system privileges by leveraging a username of __system in an arbitrary database.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://jira.mongodb.org/browse/SERVER-9983
http://www.mongodb.org/about/alerts/

Exploit#

No public exploit known

History#

Version 12013-07-04Record published in the CVE List.
Version 22024-09-16Most recent update recorded in the CVE List.