The client in MongoDB uses world-readable permissions on .dbshell history files, which might allow local users to obtain sensitive information by reading these files.

The version of the remote MongoDB server is 2.x, 3.x < 3.0.15, 3.2.x < 3.2.14, 3.3.x < 3.3.14. It is, therefore, affected by an information disclosure in mongo shell due to the MongoDB client having world-readable permissions on .dbshell history files. An unauthenticated, local attacker can exploit this by reading these files to disclose potentially sensitive information.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Security fix for CVE-2016-6494.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This is an update of DLA-588-1. The previous build had revision number that was considered lower than the one in wheezy and was therefore not installed at upgrade.

The text for DLA-588-1 is included here for reference (with some improvement).

Two security related problems have been found in the mongodb package, both related to logging.

CVE-2016-6494 World-readable .dbshell history file

Debian Bug 833087 Bruteforcable challenge responses in unprotected logfile

For Debian 7 'Wheezy', these problems have been fixed in version 2.0.6-1.1+deb7u1.

We recommend that you upgrade your mongodb packages.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
135921	MongoDB 2.x, 3.0.x < 3.0.15, 3.1.x < 3.2.14, 3.3.x < 3.3.14 Mongo Shell Information Disclosure Vulnerability (SERVER-25335)	Nessus	Databases	medium
94839	Fedora 25 : mongodb (2016-9a8e2bbc04)	Nessus	Fedora Local Security Checks	medium
93901	Fedora 24 : mongodb (2016-89060100d7)	Nessus	Fedora Local Security Checks	medium
93879	Fedora 23 : mongodb (2016-4cedbd4308)	Nessus	Fedora Local Security Checks	medium
92793	Debian DLA-588-2 : mongodb security update	Nessus	Debian Local Security Checks	medium

Detections

Analytics

CVE-2016-6494

medium

Tenable Plugins

medium

medium

medium

medium

medium