PT-2025-28170 · Mongodb+2 · Mongodb Server+3

Published 2025-07-07 · Updated 2025-10-05 · CVE-2025-6711

Positive Technologies (AI Summary)

CVSS v3.1

4.9

Medium

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions: MongoDB Server versions prior to 8.0.5 MongoDB Server versions prior to 7.0.18 MongoDB Server versions prior to 6.0.21

Description: An issue has been identified in MongoDB Server where unredacted queries may inadvertently appear in server logs when certain error conditions are encountered.

Recommendations: For MongoDB Server versions prior to 8.0.5, update to version 8.0.5 or later. For MongoDB Server versions prior to 7.0.18, update to version 7.0.18 or later. For MongoDB Server versions prior to 6.0.21, update to version 6.0.21 or later.

Fix

Insertion into Log File

Weakness Enumeration

CWE-532

Related Identifiers

ALT-PU-2025-9742

ALT-PU-2025-9750

ALT-PU-2025-9809

ALT-PU-2025-9926

BDU:2025-11757

BIT-MONGODB-2025-6711

CVE-2025-6711

Affected Products

Alt Linux

Mongodb Server

Mongodb

Red Os

References · 14

• https://jira.mongodb.org/browse/SERVER-98720 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-6711 · Security Note
• https://cve.org/CVERecord?id=CVE-2025-6711 · Security Note
• https://bdu.fstec.ru/vul/2025-11757 · Security Note
• https://ubuntu.com/security/CVE-2025-6711 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-6711 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-6711 · Vendor Advisory
• https://osv.dev/vulnerability/BIT-mongodb-2025-6711 · Vendor Advisory
• https://redos.red-soft.ru/support/secure · Note
• https://twitter.com/CVEnew/status/1942236668851097812 · Twitter Post
• https://redos.red-soft.ru/support/secure/uyazvimosti/support/secure/uyazvimosti/mnozhestvennye-uyazvimosti-mongodb-org-060820251 · Note
• https://redos.red-soft.ru/support/secure/uyazvimosti/support/secure/uyazvimosti/mnozhestvennye-uyazvimosti-mongodb-org-060820252 · Note
• https://twitter.com/VulmonFeeds/status/1942271227420184958 · Twitter Post
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-6711 · Note