Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
MongoDb Improper Input Validation Vulnerability - CVE-2019-2389 - Vulnerability Database
MongoDb

MongoDb Improper Input Validation Vulnerability - CVE-2019-2389

Medium
Reference: CVE-2019-2389
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2019-2389
Title: MongoDb Improper Input Validation Vulnerability
Overview:

Incorrect scoping of kill operations in MongoDB Server39s packaged SysV init scripts allow users with write access to the PID file to insert arbitrary PIDs to be killed when the root user stops the MongoDB process via SysV init. This issue affects MongoDB Server v4.0 versions prior to 4.0.11 MongoDB Server v3.6 versions prior to 3.6.14 MongoDB Server v3.4 versions prior to 3.4.22.