CyberRota Analysis
AI-GeneratedMongoDB is vulnerable due to a flaw that allows a database user to create a view that disrupts the schema-sampling routine of the MongoDB Connector for BI, leading to failures in schema refresh and rendering SQL clients unable to retrieve results. This high-severity issue can significantly impact database operations, particularly for environments relying on BI tools for data analysis. Organizations using MongoDB with BI integration should prioritize addressing this vulnerability to ensure uninterrupted access to data and maintain operational efficiency.
Original NVD Description
A database user able to create a view in a namespace that MongoDB Connector for BI samples can cause the schema-sampling routine to stop functioning by defining a view whose evaluation reliably fails. The sampling logic classifies the resulting server message as transient and, after the configured retries are exhausted, proceeds without a valid result, ending the schema refresh routine. The mongosqld process continues running without a usable schema, so SQL clients are unable to obtain results until an operator removes the view or excludes its namespace from sampling.