漏洞类别:Fedora
漏洞等级:
漏洞信息
Fedora has released security update for mongodb to fix the vulnerability.
Affected OS:
Fedora 23
漏洞危害
The client in MongoDB uses world-readable permissions on .dbshell history files, which might allow local users to obtain sensitive information by reading these files.
解决方案
Fedora has issued updated packages to fix this vulnerability. Updates can be installed using the yum utility, which can be downloaded from the Fedora Web site.
Refer to the following Fedora security advisories :Fedora 23 Update for more information about the vulnerability and obtaining patches.
Patch:
Following are links for downloading patches to fix the vulnerabilities:
0day
文章评论