PT-2025-14094 · Mongodb+2 · Mongodb Server+3

Published

2024-10-01

·

Updated

2025-09-23

·

CVE-2025-3082

CVSS v3.1

5.4

Medium

VectorAV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions MongoDB Server versions prior to 5.0.31 MongoDB Server versions prior to 6.0.20 MongoDB Server versions prior to 7.0.14 MongoDB Server versions prior to 7.3.4
Description A user authorized to access a view may be able to alter the intended collation, allowing them to access a different or unintended view of underlying data.
Recommendations For MongoDB Server versions prior to 5.0.31, update to version 5.0.31 or later. For MongoDB Server versions prior to 6.0.20, update to version 6.0.20 or later. For MongoDB Server versions prior to 7.0.14, update to version 7.0.14 or later. For MongoDB Server versions prior to 7.3.4, update to version 7.3.4 or later.

Fix

Improper Access Control

Weakness Enumeration

CWE-284CWE-248CWE-703CWE-299

Related Identifiers

ALT-PU-2025-5420
ALT-PU-2025-5457
ALT-PU-2025-5545
BDU:2025-03885
BDU:2025-06143
BDU:2025-06209
BDU:2025-06210
BIT-MONGODB-2025-3082
CVE-2025-3082

Affected Products

Alt Linux
Mongodb Server
Mongodb
Red Os