UpHeron
All vulnerabilities

Servers and applications

CVE-2025-3085

A MongoDB server under specific conditions running on Linux with TLS and CRL revocation status checking enabled, fails to check the revocation status of the intermediate certificates in the peer's certificate chain. In cases of MONGODB-X509, which is not enabled by default, this may lead to improper authentication. This issue may also affect intra-cluster authentication. This issue affects…

Severity
Critical 9.8
Published
1 Apr 2025
Last changed
17 Jun 2026
Added to UpHeron
21 Oct 2026
Fixed in
5.0.31, 6.0.20, 7.0.16, 8.0.4
Sources
NVD

Affected software

SoftwareAffected versions
MongoDBServers and applications · cpe:a:mongodb:mongodb
  • From 5.0.0 before 5.0.31
  • From 6.0.0 before 6.0.20
  • From 7.0.0 before 7.0.16
  • From 8.0.0 before 8.0.4

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2025-3085
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2025-3085