CVE-2026-8431

概要

参考情報

• mongodb.com/docs/ops-manager/current/release-notes/application · Vendor Advisory

ops manager のその他の脆弱性

• CVE-2026-87110中 5.3An unauthenticated user with network access to the Ops Manager web port can repeatedly request monitoring endpoints that perform costly work…
• CVE-2026-87109中 6.5An authenticated Ops Manager organization member can retrieve another member's pending authenticator enrollment seed through user-listing en…
• CVE-2026-87108中 4.3An authenticated Ops Manager user with a read-only project role can retrieve a daily host monitoring record associated with a different proj…
• CVE-2021-20335中 4.6For MongoDB Ops Manager versions prior to and including 4.2.24 with multiple OM application servers, that have SSL turned on for their Mongo…
• CVE-2020-7927中 6.5Specially crafted API calls may allow an authenticated user who holds Organization Owner privilege to obtain an API key with Global Role pri…