CyberRota Analysis
AI-GeneratedMongoDB Server's query statistics serialization is vulnerable, allowing users with monitoring privileges to access unredacted search query text from other users due to an improper conditional check in the serialization logic. This flaw can lead to the exposure of sensitive query literals, potentially compromising user privacy and data security. Organizations utilizing MongoDB, particularly those with shared environments or sensitive data, should prioritize addressing this vulnerability.
Original NVD Description
A security issue in MongoDB Server's query statistics serialization on the router allows users with monitoring privileges to access unredacted search query text from other users' operations. An improper conditional check in the serialization logic causes the data redaction mechanism to be bypassed when processing search queries through the sharded cluster router. This results in sensitive query literals being stored and made accessible through the query statistics interface.