CVE-2015-7882— Authentication bypass when using LDAP authentication in MongoDB Enterprise Server
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2015-7882
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Authentication bypass when using LDAP authentication in MongoDB Enterprise Server
Source: NVD (National Vulnerability Database)
Vulnerability Description
Improper handling of LDAP authentication in MongoDB Server versions 3.0.0 to 3.0.6 allows an unauthenticated client to gain unauthorized access.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
MongoDB Server 授权问题漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
MongoDB Server是美国MongoDB公司的一套开源的NoSQL数据库。该数据库提供面向集合的存储、动态查询、数据复制及自动故障转移等功能。 MongoDB Server 3.0.0版本至3.0.6版本中存在安全漏洞。攻击者可利用该漏洞获取未授权的访问权限。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
II. Public POCs for CVE-2015-7882
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2015-7882
请登录查看更多情报信息。
- 🔗 https://jira.mongodb.org/browse/SERVER-20691x_refsource_CONFIRM
- https://nvd.nist.gov/vuln/detail/CVE-2015-7882
Same Patch Batch · n/a · 2019-07-19 · 36 CVEs total
| CVE-2019-11989 | HPE IceWall SSO Agent Option和IceWall MFA 输入验证错误漏洞 | |
| CVE-2019-11553 | Code42 Software Code42 for Enterprise 访问控制错误漏洞 | |
| CVE-2018-17792 | MDaemon Webmail 跨站请求伪造漏洞 | |
| CVE-2019-12453 | Microstrategy Web 跨站脚本漏洞 | |
| CVE-2019-12820 | Jisiwei i3 信任管理问题漏洞 | |
| CVE-2019-12821 | Jisiwei i3 安全特征问题漏洞 | |
| CVE-2019-13989 | dpic 缓冲区错误漏洞 | |
| CVE-2019-13991 | Arduino 注入漏洞 | |
| CVE-2019-1579 | Palo Alto Networks PAN-OS 输入验证错误漏洞 | |
| CVE-2019-12193 | H3C H3Cloud OS SQL注入漏洞 | |
| CVE-2019-11990 | HPE UIoT 访问控制错误漏洞 | |
| CVE-2019-12725 | Zeroshell 操作系统命令注入漏洞 | |
| CVE-2019-13569 | WordPress Icegram Email Subscribers & Newsletters插件SQL注入漏洞 | |
| CVE-2019-9228 | 多款AudioCodes产品资源管理错误漏洞 | |
| CVE-2019-12815 | ProFTPD 访问控制错误漏洞 | |
| CVE-2019-9229 | 多款AudioCodes产品信任管理问题漏洞 | |
| CVE-2018-17210 | PrinterOn Central Print Services 授权问题漏洞 | |
| CVE-2019-12934 | WordPress wp-code-highlightjs插件跨站请求伪造漏洞 | |
| CVE-2019-11552 | Code42 Software CrashPlan for Small Business 代码注入漏洞 | |
| CVE-2019-13970 | antSword 跨站脚本漏洞 |
Showing top 20 of 36 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same vendor: n/a
- CVE-2026-8276
bettercap MySQL Server mysql_server.go integer coercion - CVE-2026-8275
bettercap zerogod IPP Service zerogod_ipp_primitives.go ippR - CVE-2026-8270
Open5GS SMF ogs_nas_parse_qos_rules denial of service - CVE-2026-8269
Open5GS SMF smf_nsmf_handle_create_sm_context denial of serv - CVE-2026-8268
Open5GS SMF OpenAPI_list_create denial of service
V. Comments for CVE-2015-7882
No comments yet