This vulnerability in MongoDB Server allows an authenticated party possessing a valid client certificate and a matching user account to authenticate via certificate-based authentication despite server configurations that restrict or disable this method. The issue effectively bypasses administrative controls intended to limit authentication mechanisms, potentially allowing unauthorized access through an unintended authentication path.

The vulnerability could allow an attacker with valid client credentials to authenticate using a certificate-based method that was intended to be disabled by the administrator. This may lead to unauthorized access with limited confidentiality and integrity impact, but no availability impact is indicated. The CVSS score of 4.2 reflects a low severity with network attack vector, high attack complexity, low privileges required, and no user interaction needed.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, administrators should review authentication configurations and monitor for any unexpected certificate-based authentications. No official patch or workaround information is provided in the current data.