medium6.5
CVE-2013-4650
MongoDB 2.4.x before 2.4.5 and 2.5.x before 2.5.1 allows remote authenticated users to obtain internal system privileges by leveraging a username of __system i…
Impact
MongoDB 2.4.x before 2.4.5 and 2.5.x before 2.5.1 allows remote authenticated users to obtain internal system privileges by leveraging a username of __system in an arbitrary database.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mongodb | Mongodb | Versions 2.4.0, 2.4.1, 2.4.2, 2.4.3, 2.4.4, 2.5.0 |