writeups.xyz / Unauthenticated Access To MongoDB Database of Oracle Corporation

Submitter : c2a

Date: 22 July 2021

Bounty : undisclosed

Vulnerabilities :

• Missing Authentication
• Exposed Administrative Interface

Programs :

• Oracle

Authors :

• Pratikkhalane (@KhalanePratik)

Link :
https://pratikkhalane91.medium.com/unauthenticated-access-to-mongodb-database-of-oracle-corporation-d825c271267a