CVE-2023-0342: mongodb inc. mongodb ops manager
Vulnerability summary
CVE-2023-0342 is a medium (CVSS 5.3) vulnerability in mongodb inc. mongodb ops manager. EPSS estimates a 0.89% chance of exploitation in the next 30 days, higher than 58.7% of scored vulnerabilities. 1 public exploit is recorded.
Timeline
- 09-06-2023PublishedVulnerability first disclosed.
- 06-01-2025Last modifiedVulnerability information updated.
Description
MongoDB Ops Manager Diagnostics Archive may not redact sensitive PEM key file password app settings. Archives do not include the PEM files themselves. This issue affects MongoDB Ops Manager v5.0 prior to 5.0.21 and MongoDB Ops Manager v6.0 prior to 6.0.12
CVSS metrics
2 scores · 2 sources · 1 version- CVE.orgCNA3.1LowCVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:NDiffers
EPSS trend
Probability
0.89%
Chance of exploitation in the next 30 days
Percentile
59%
Versus all other CVEs
30-day change
0.00 pp
From 0.89% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
1 foundMongoDB Ops Manager Diagnostic Archive Sensitive Information Retriever
auxiliary/gather/mongodb_ops_manager_diagnostic_archive_info
Maturity: poc
Weaknesses
CWE · root causeAffected systems
Mongodb1 product
- ops_manager_server≥ 5.0.0, < 5.0.21 | ≥ 6.0.0, < 6.0.12
Mongodb inc.1 product
- mongodb ops manager≥ v5.0, < 5.0.21 | ≥ v6.0, < 6.0.12
2 vendors · 2 products