Description
MongoDB server may log authentication parameters, including credentials, to the server log during SASL authentication. When connection health metric logging is enabled, the full authentication parameters are written to the log without redaction.
Remediation
References
Related Vulnerabilities
WordPress Plugin Answer My Question Cross-Site Scripting (1.3)
MongoDb Missing Authorization Vulnerability (CVE-2025-13643)
WordPress Plugin WP Bannerize 'ajax_clickcounter.php' SQL Injection (2.8.6)
Drupal Core 5.x Multiple Vulnerabilities (5.0 - 5.7)
Joomla Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2017-16633)