CVE-2026-81530

Katalog CVE

CVSS 5.6 · Medium EPSS 0,09%

Kerentanan Insertion of Sensitive Information into Log File pada mongodb c# driver. Skor CVSS 3.1 5.6 (Medium) menurut mongodb.com.

Deskripsi (NVD)

A weakness in the client-side encryption configuration surface of the MongoDB C# Driver causes sensitive key-management credential material supplied by the application to be reproduced verbatim in the driver's human-readable diagnostic representation of its client settings, instead of being masked as other secret fields are. A party able to read the application's logs, diagnostic output, or a process memory dump may thereby recover the plaintext credentials and use them to decrypt protected field data.

Rincian

Terbit di NVD

27 Agustus 2026

Terakhir diubah

29 September 2026

Status NVD

Analyzed

CVSS 3.1

5.6 (Medium), sumber mongodb.com
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-532: Insertion of Sensitive Information into Log File

EPSS (30 hari)

0,09% peluang dieksploitasi; lebih tinggi dari 0,4% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://jira.mongodb.org/browse/CSHARP-6164 advisory vendor
• https://www.nuget.org/packages/MongoDB.Driver/3.11.1 product