CVE-2024-6384

—

CVSS 3.1

5.3 medium

EPSS

<1%p36

Published

Aug 13, 2024 (Aug 13, 2024)

Modified

Jun 17, 2026

Description

"Hot" backup files may be downloaded by underprivileged users, if they are capable of acquiring a unique backup identifier. This issue affects MongoDB Enterprise Server v6.0 versions prior to 6.0.16, MongoDB Enterprise Server v7.0 versions prior to 7.0.11 and MongoDB Enterprise Server v7.3 versions prior to 7.3.3

Vendors: mongodb
Products: mongodb
Weakness: CWE-285
Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.4%)

In the news0 stories

No ingested article mentions this CVE yet.