Description

Improper handling of LDAP authentication in MongoDB Server versions 3.0.0 to 3.0.6 allows an unauthenticated client to gain unauthorized access.

Remediation

References

CVE-2015-7882

Related Vulnerabilities

Dot CMS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2024-3938)

WordPress Plugin WP Symposium Multiple Vulnerabilities (14.10)

WordPress Plugin Two-Factor Authentication-Clockwork SMS Cross-Site Scripting (1.0.3)

OpenSSL Improper Input Validation Vulnerability (CVE-2010-0740)

Drupal Core 8.0.x Multiple Vulnerabilities (8.0.0 - 8.0.3)

Severity

High

Classification

CVE-2015-7882 CWE-287 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Tags

Missing Update Known Vulnerabilities