Description

MongoDB 2.4.x before 2.4.5 and 2.5.x before 2.5.1 allows remote authenticated users to obtain internal system privileges by leveraging a username of __system in an arbitrary database.

Remediation

References

CVE-2013-4650

Related Vulnerabilities

Joomla! Core 1.5.x Security Bypass (1.5.0 - 1.5.15)

Joomla! Core 3.x.x Cross-Site Request Forgery (3.7.0 - 3.9.18)

Drupal Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2008-3223)

WordPress Plugin JS MultiHotel Multiple Vulnerabilities (2.2.1)

Magento Authorization Bypass Through User-Controlled Key Vulnerability (CVE-2019-7925)

Severity

Medium

Classification

CVE-2013-4650 CWE-264

Tags

Missing Update Known Vulnerabilities