CVE-2023-0342 LOW

CVE-2023-0342: MongoDB Ops Manager may disclose sensitive information in Diagnostic Archive

Vendor Mongodb Inc.
Product MongoDB Ops Manager
Weakness CWE-497
Published June 9, 2023
Last update January 6, 2025
View on NVD All CVEs

CVSS base score

3.1/10
Attack vector Local
Attack complexity Low
Privileges required High
User interaction Required
Confidentiality Low
Integrity Low

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:N

What the vulnerability does

01Description

MongoDB Ops Manager Diagnostics Archive may not redact sensitive PEM key file password app settings. Archives do not include the PEM files themselves. This issue affects MongoDB Ops Manager v5.0 prior to 5.0.21 and MongoDB Ops Manager v6.0 prior to 6.0.12

Key dates

02Disclosure timeline

June 9, 2023 CVE published
January 6, 2025 Record updated

Related vulnerabilities

04Related CVE

CVE-2025-23969 WordPress KI Live Video Conferences plugin <= 5.5.15 - Sensitive Data Exposure Vulnerability CVE-2026-24314 Information Disclosure vulnerability in S/4HANA (Manage Payment Media) CVE-2026-48878 WordPress Visual Link Preview plugin <= 2.4.1 - Sensitive Data Exposure vulnerability CVE-2025-52752 WordPress IDonatePro plugin <= 2.1.9 - Sensitive Data Exposure vulnerability CVE-2024-53867 Synapse Matrix has a partial room state leak via Sliding Sync