Schema Builder Cli
Monthly
MongoDB Atlas SQL ODBC Driver and Schema Builder CLI fail to validate URI schemes in authorization and token endpoints returned by an OIDC issuer's discovery document, allowing an attacker-controlled MongoDB deployment to dispatch arbitrary URIs to a victim's operating system protocol handler. Users employing MONGODB-OIDC authentication who are induced to connect to a rogue or compromised MongoDB deployment may have OIDC credentials exposed or, under conditions where a dangerous OS protocol handler is registered, experience code execution within their user session context. No public exploit has been identified at time of analysis, and exploitation carries meaningful social engineering prerequisites that constrain real-world reach despite the network-accessible attack vector.
Plaintext credential exposure in MongoDB SQL Schema Builder CLI allows local users to read authentication material from diagnostic output or log files. The CLI writes its startup configuration - including connection settings containing authentication credentials - to standard output and optionally to a log file on disk without redacting sensitive values. Any local user with read access to the terminal session, the log directory, or a downstream log aggregation system can harvest those credentials and use them to authenticate to the connected MongoDB instance.
MongoDB Atlas SQL ODBC Driver and Schema Builder CLI fail to validate URI schemes in authorization and token endpoints returned by an OIDC issuer's discovery document, allowing an attacker-controlled MongoDB deployment to dispatch arbitrary URIs to a victim's operating system protocol handler. Users employing MONGODB-OIDC authentication who are induced to connect to a rogue or compromised MongoDB deployment may have OIDC credentials exposed or, under conditions where a dangerous OS protocol handler is registered, experience code execution within their user session context. No public exploit has been identified at time of analysis, and exploitation carries meaningful social engineering prerequisites that constrain real-world reach despite the network-accessible attack vector.
Plaintext credential exposure in MongoDB SQL Schema Builder CLI allows local users to read authentication material from diagnostic output or log files. The CLI writes its startup configuration - including connection settings containing authentication credentials - to standard output and optionally to a log file on disk without redacting sensitive values. Any local user with read access to the terminal session, the log directory, or a downstream log aggregation system can harvest those credentials and use them to authenticate to the connected MongoDB instance.