UpHeron
All vulnerabilities

Servers and applications

CVE-2023-1409

If the MongoDB Server running on Windows or macOS is configured to use TLS with a specific set of configuration options that are already known to work securely in other platforms (e.g. Linux), it is possible that client certificate validation may not be in effect, potentially allowing client to establish a TLS connection with the server that supplies any certificate. This issue affect all…

Severity
High 7.5
Published
23 Aug 2023
Last changed
17 Jun 2026
Added to UpHeron
21 Oct 2026
Fixed in
4.4.23, 6.0.7
Sources
NVD

Affected software

SoftwareAffected versions
MongoDBServers and applications · cpe:a:mongodb:mongodb
  • From 4.4.0 before 4.4.23
  • From 5.0.0 up to 5.0.14
  • From 6.0.0 before 6.0.7
  • From 6.3.0 up to 6.3.2

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2023-1409
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2023-1409