CVE-2017-18381

High

7.2/10

Summary

The installation process in Open edX before 2017-01-10 exposes a MongoDB instance to external connections with default credentials.

Attack Complexity: LOW
Attack Vector: NETWORK
Integrity Impact: HIGH
Scope: UNCHANGED
User Interaction: NONE
Privileges Required: HIGH
Confidentiality Impact: HIGH
Availability Impact: HIGH

References

Advisory Timeline

Published Jul 30, 2019