Vulnerabilities > CVE-2017-18381 - Unspecified vulnerability in EDX Edx-Platform

047910
CVSS 7.2 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
HIGH
Confidentiality impact
HIGH
Integrity impact
HIGH
Availability impact
HIGH
network
low complexity
edx

Summary

The installation process in Open edX before 2017-01-10 exposes a MongoDB instance to external connections with default credentials.

Vulnerable Configurations

Part Description Count
Application
Edx
197