[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fCEVybqiFWcn4U8ofr4i-OYuE8Yso-ESWc245f6azXL4":3,"g5a-risk:CVE-2021-20334":125},{"success":4,"data":5,"meta":123},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":48,"epssPercentile":26,"epssTimeSeries":49,"severity":50,"affectedProducts":51,"affectedProductsCount":62,"references":63,"referencesCount":69,"weaknesses":70,"weaknessesCount":69,"isActivelyExploited":79,"cisaInfo":26,"otxData":26,"relatedBlogPosts":80,"seoMetadata":81,"configurations":106,"relatedVendorCves":121,"notableEvents":122},"CVE-2021-20334","What is CVE-2021-20334?","A malicious 3rd party with local access to the Windows machine where MongoDB Compass is installed can execute arbitrary software with the privileges of the user who is running MongoDB Compass. This issue affects: MongoDB Inc. MongoDB Compass 1.x version 1.3.0 on Windows and later versions; 1.x versions prior to 1.25.0 on Windows.","A malicious 3rd party with local access to the Windows machine where MongoDB Compass is installed can execute arbitrary software with the privileges of the u...","2021-04-06T17:15:12.603","2021-04-14T16:15:41.753",7.8,"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":26,"CVSSMetricV2":39,"CVSSMetricV40":26},[16,29],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":22,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":25,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","LOCAL","LOW","NONE","UNCHANGED","HIGH",null,1.8,5.9,{"Source":30,"Type":31,"CVSSData":32,"ExploitabilityScore":37,"ImpactScore":38},"cna@mongodb.com","Secondary",{"Version":20,"VectorString":33,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":22,"UserInteraction":34,"Scope":24,"ConfidentialityImpact":22,"IntegrityImpact":22,"AvailabilityImpact":22,"BaseScore":35,"BaseSeverity":36,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":22,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:U\u002FC:L\u002FI:L\u002FA:L","REQUIRED",4.8,"MEDIUM",1.3,3.4,[40],{"Source":17,"Type":18,"CVSSData":41,"BaseSeverity":36,"ExploitabilityScore":46,"ImpactScore":47,"ACInsufInfo":26,"ObtainAllPrivilege":26,"ObtainUserPrivilege":26,"ObtainOtherPrivilege":26,"UserInteractionRequired":26},{"Version":42,"VectorString":43,"AccessVector":21,"AccessComplexity":22,"Authentication":23,"ConfidentialityImpact":44,"IntegrityImpact":44,"AvailabilityImpact":44,"BaseScore":45,"BaseSeverity":26,"Exploitability":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"CollateralDamagePotential":26,"TargetDistribution":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"EnvironmentalScore":26},"2.0","AV:L\u002FAC:L\u002FAu:N\u002FC:P\u002FI:P\u002FA:P","PARTIAL",4.6,3.9,6.4,0.00202,[48,48,48,48,48,48,48],"High",[52,57],{"vendor":53,"product":54,"version":55,"criteria":56,"vulnerable":4},"mongodb","compass","*","cpe:2.3:a:mongodb:compass:*:*:*:*:*:*:*:*",{"vendor":58,"product":59,"version":60,"criteria":61,"vulnerable":4},"microsoft","windows","-","cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",2,[64],{"url":65,"source":66,"tags":67},"https:\u002F\u002Fjira.mongodb.org\u002Fbrowse\u002FCOMPASS-4510","Mongodb",[68],"Vendor Advisory",1,[71],{"id":72,"name":73,"description":74,"extendedDescription":75,"status":76,"abstraction":77,"structure":78},"CWE-269","Improper Privilege Management","The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.","","Draft","Class","Simple",false,[],{"title":82,"metaDescription":83,"keywords":84,"canonicalUrl":85,"structuredData":86},"What is CVE-2021-20334? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2021-20334, a high severity cyber security vulnerability from 2021. A malicious 3rd party with local access to the Windows mach...","CVE-2021-20334, CVE-2021-20334 vulnerability, CVE-2021-20334 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2021, CVSS score, exploit, patch, remediation, mongodb security, microsoft security, compass vulnerability, windows vulnerability","\u002Fwhat-is\u002Fcve-2021-20334",{"@context":87,"@type":88,"headline":82,"description":83,"datePublished":10,"dateModified":11,"author":89,"publisher":93,"about":97,"mainEntityOfPage":101,"articleSection":104,"keywords":105},"https:\u002F\u002Fschema.org","TechArticle",{"@type":90,"name":91,"url":92},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":90,"name":91,"url":92,"logo":94},{"@type":95,"url":96},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":98,"name":6,"description":99,"additionalType":100},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":102,"@id":103},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2021-20334","Cybersecurity","CVE-2021-20334, CVE-2021-20334 vulnerability, CVE-2021-20334 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[107],{"Operator":108,"Negate":26,"Nodes":109},"AND",[110,117],{"Operator":111,"Negate":26,"CPEMatch":112},"OR",[113],{"Vulnerable":4,"Criteria":56,"MatchCriteriaID":114,"VersionStartExcluding":26,"VersionStartIncluding":115,"VersionEndExcluding":116,"VersionEndIncluding":26},"8A9E6B03-9F94-4021-9C28-B209B4B3D33C","1.3.0","1.25.0",{"Operator":111,"Negate":26,"CPEMatch":118},[119],{"Vulnerable":26,"Criteria":61,"MatchCriteriaID":120,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"A2572D17-1DE6-457B-99CC-64AFD54487EA",[],[],{"lastModified":11,"cacheTime":124,"version":42},1792362822323,{"score":126,"band":127,"action":128,"scoredAt":129},45,"Medium","Plan remediation","2026-10-16T06:50:50.838667+00:00"]