| Package | Affected versions | Patched versions |
|---|---|---|
| mongodb | ≥ 7.0.0, < 7.0.35≥ 8.0.0, < 8.0.24≥ 8.2.0, < 8.2.10≥ 8.3.0, < 8.3.3 | 7.0.358.0.248.2.108.3.3 |
The ldapQueryPassword parameter, when set through the runtime setParameter command, will log the new password to the mongod.log file in plain text.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free