CyberRota Analysis
AI-GeneratedMongoDB installations using mongosqld with a client certificate authority file are vulnerable due to the listener's failure to enforce client certificate requirements during the TLS handshake. This flaw allows unauthorized clients to connect and potentially access sensitive data, posing a significant risk to deployments that rely solely on client certificates for user authentication. Organizations utilizing MongoDB in environments where client certificates are critical for security should prioritize remediation efforts to mitigate this vulnerability.
Original NVD Description
When mongosqld is configured with a client certificate authority file, the listener requests a client certificate during the TLS handshake but does not require one, so a client that presents no certificate is still accepted. In deployments that rely on client certificates as the sole means of identifying users, a remote party with network access to the listener can therefore establish a session and read the MongoDB data exposed through the connector.