Threats tagged 'ghsa-jx4v-jf9c-3rh7'

A vulnerability in MongoDB Server's intra-cluster connection setup allows an attacker with network access to influence the authentication mechanism used between replica set members. This can lead to the cluster's shared internal credential being transmitted in a less-protected form, potentially exposing it. If the credential is recovered, it could be used to authenticate as the internal superuser on nodes within the deployment.