-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AIMiggo AIRoot Cause AnalysisThe vulnerability stems from improper redaction logic in the command event handler. The commit diff shows the vulnerable ShouldRedactMessage function was replaced by ShouldRedactCommand with improved case-insensitive checks and proper handling of 'speculativeAuthenticate'. The original implementation used exact string matching for command names and missed case variations, failing to redact sensitive authentication commands when logged via command listeners.
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| mongodb.driver | nuget | >= 2.11.0, < 2.12.2 | 2.12.2 |