CVE-2026-19502: MongoDB Schema Builder CLI, изтичане на данни

Описание

Оригинално описание

MongoDB SQL Schema Builder CLI records its startup configuration to standard output and, when file logging is enabled, to a log file on disk. Certain connection settings were written without redaction, so authentication material supplied by the operator could appear in plaintext in that diagnostic output. A local user with read access to the terminal session or the log directory, or anyone with access to a location where those logs are subsequently collected, could obtain those values.

Засегнати продукти

• MongoDB Schema Builder CLI: 1.0.0 преди 1.2.1

Вид слабост

• CWE-532 Insertion of Sensitive Information into Log File

История

Други уязвимости в MongoDB Schema Builder CLI

• 6.3CVE-2026-19503

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2026-19502
• https://nvd.nist.gov/vuln/detail/CVE-2026-19502
• https://www.mongodb.com/docs/sql-interface/changelog