CyberRota Analysis
AI-GeneratedAuthenticated users with write privileges on a Queryable Encryption-enabled collection may exploit this vulnerability to manipulate internal encryption metadata fields, potentially leading to corrupted encrypted query results. Organizations utilizing sharded clusters with this feature should prioritize addressing this issue to safeguard data integrity and prevent unauthorized data manipulation.
Original NVD Description
An authenticated user with write privileges on a Queryable Encryption-enabled collection may be able to modify internal encryption metadata fields that are intended to be server-controlled, by sending crafted write commands through the mongos router on a sharded cluster. This can result in corruption of encrypted query correctness.
Related CVEs
Other vulnerabilities affecting the same vendor(s)