Approved changes feed: RSS · Atom

cpe:2.3:a:mongodb_inc.:mongodb_compass:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorMongodb Inc. (050bf205-86f7-543b-9a0d-79a7153336ef)
ProductMongodb Compass (34fa60dd-2849-5aaa-9e38-cf7d6abfa1de)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-20334 vulnerable 2026-06-03 14:43:41.619494 Local privilege escalation in MongoDB Compass for Windows
MEDIUM (4.8)
A malicious 3rd party with local access to the Windows machine where MongoDB Compass is installed can execute arbitrary software with the privileges of the user who is running MongoDB Compass. This issue affects: MongoDB Inc. MongoDB Compass 1.x version 1.3.0 on Windows and later versions; 1.x versions prior to 1.25.0 on Windows.
Published: 2021-04-06T16:45:20.154Z
Updated: 2024-09-17T01:25:58.140Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.