← Database

CVE-2026-9751

MEDIUM CVSS: 5.5 Published: 2026-06-09 Modified: 2026-07-23

Description

The ldapQueryPassword parameter, when set through the runtime setParameter command, will log the new password to the mongod.log file in plain text.

Affected Platforms

Mongodb Mongodb

Weakness Type

CWE-532

References