Threats tagged 'ghsa-49qq-8x3w-qqmj'

A vulnerability in MongoDB Server's aggregation framework allows users with any valid credentials, even those without assigned roles, to read deployment-wide query configuration data. This data is normally restricted to users with cluster-level privileges. The issue could lead to unintended exposure of configuration and schema information.