CVE-2016-6494

2.1

LOWCVSS v2

Published

October 3, 2016

Affected

7 projects

Assigned by

MITRE

Severity scale

010

Description

The client in MongoDB uses world-readable permissions on .dbshell history files, which might allow local users to obtain sensitive information by reading these files.

mongodb

NPMThe official MongoDB driver for Node.js

>= 3.2, < 3.2.14, >= 3.3, < 3.3.14, < 3.0.15NVD

mongodb/mongo

GitHubThe MongoDB Database

NVD

@types/mongodb

NPM

More on this CVE

NVD↗GitHub Advisory↗

Stub TypeScript definitions entry for mongodb, which provides its own types definitions

>= 3.2, < 3.2.14, >= 3.3, < 3.3.14, < 3.0.15NVD

mongodb

Crates.ioThe official MongoDB driver for Rust

>= 3.2, < 3.2.14, >= 3.3, < 3.3.14, < 3.0.15NVD

mongodb

RubyGemsPersistence for any Ruby Object & Driver enhancements for MongoDB.

>= 3.2, < 3.2.14, >= 3.3, < 3.3.14, < 3.0.15NVD

fedora

NPMDigital Repository Ireland - fedora backend operations

= 25NVD

fedora

RubyGemsSet of capistrano recipies for automating creation of Fedora servers.

= 25NVD

Security Advisories

CVE-2016-6494

Description

More on this CVE