Mongodb 数据库未授权访问 PoC

Follow 0

Basic Fields

SSV ID:: SSV-88997

Find Time:: 2014-12-11

Submit Time:: 2014-12-19

Level:

Category:: 数据库发现

Component:: MongoDB

Author:: Unknown

Submitter:: Knownsec

CVE-ID：: Add

CNNVD-ID：: Add

CNVD-ID：: Add

ZoomEye Dork：: Add

Source

Detail

Contributor Knownsec Got 4.4KB

etc 26 exchange

PoC (pocsuite 插件) (pocsuite 插件)

Contributor anonymous totally have 30KB

Login to exchange

have 6 Exchange

Reference Linking

http://beebeeto.com/pdb/poc-2014-0194/

Solutions

Temp Solutions

Official Solution

Unavailable Official solution

Defense Solutions

Unavailable Defense Solutions

Timeline

2014-12-11 发现/披露了漏洞
2014-12-11 提交更新了 PoC
2014-12-19 提交了漏洞
2014-12-19 提交补充了漏洞详情
2015-05-13 提交补充了漏洞靶场
2015-10-29 提交更新了 PoC

Related Vuls

Unavailable Comments

※Any content provided by this site, only to learn the code and services, not for illegal purposes