Threats tagged 'ghsa-4h4m-qr7q-h832'

A vulnerability in the sharding subsystem of MongoDB Server allows users with certain shard-level administrative privileges to cause internal coordination state to be reprocessed with elevated authority. This can lead to unauthorized operations beyond the user's scope, including changes to cluster-wide security settings and data modification across the cluster. Exploitation requires an authenticated session directly against a cluster member.