CyberRota Analysis
AI-GeneratedMongoDB's SQL Schema Builder CLI exposes sensitive authentication details in plaintext within its startup configuration output and log files when file logging is enabled. This vulnerability allows local users with read access to the terminal or log directory to potentially access sensitive information, posing a risk of unauthorized access. Organizations using MongoDB should prioritize addressing this issue to safeguard against potential data breaches.
Original NVD Description
MongoDB SQL Schema Builder CLI records its startup configuration to standard output and, when file logging is enabled, to a log file on disk. Certain connection settings were written without redaction, so authentication material supplied by the operator could appear in plaintext in that diagnostic output. A local user with read access to the terminal session or the log directory, or anyone with access to a location where those logs are subsequently collected, could obtain those values.