CyberRota Analysis
AI-GeneratedThe MongoDB Server aggregation framework is vulnerable, allowing authenticated users with limited read privileges to bypass view-level authorization checks and access unauthorized data when using Atlas Search features. This insufficient validation of an internal command parameter poses a risk of data exposure. Organizations utilizing MongoDB, particularly those leveraging Atlas Search, should prioritize addressing this vulnerability to safeguard sensitive information.
Original NVD Description
A security issue in the MongoDB Server aggregation framework allows an authenticated user with limited read privileges to bypass view-level authorization checks and access data from unauthorized collections when Atlas Search features are in use. The issue stems from insufficient validation of an internal command parameter that can be set by external clients, causing a security check to be improperly skipped.
Related CVEs
Other vulnerabilities affecting the same vendor(s)