CyberRota Analysis
AI-GeneratedThe MongoDB C# Driver has a vulnerability that exposes sensitive key-management credentials in its human-readable diagnostic output, rather than masking them as expected. This flaw allows an attacker with access to application logs, diagnostic outputs, or memory dumps to retrieve plaintext credentials, potentially leading to unauthorized decryption of protected data. Organizations using the MongoDB C# Driver should prioritize addressing this issue to safeguard their sensitive information from exposure.
Original NVD Description
A weakness in the client-side encryption configuration surface of the MongoDB C# Driver causes sensitive key-management credential material supplied by the application to be reproduced verbatim in the driver's human-readable diagnostic representation of its client settings, instead of being masked as other secret fields are. A party able to read the application's logs, diagnostic output, or a process memory dump may thereby recover the plaintext credentials and use them to decrypt protected field data.