CVE-2014-8180 Auth bypass in n/a
Local attackers can bypass MongoDB authentication in Red Hat Satellite 6 using an empty password to delete data and cause denial of service.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2014-8180?
CVE-2014-8180 is a medium-severity authentication bypass vulnerability in Mongodb Mongodb, published on 6 Jun 2017. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
MongoDB on Red Hat Satellite 6 allows local users to bypass authentication by logging in with an empty password and delete information which can cause a Denial of Service.
Weakness: CWE-287
Which versions are affected by CVE-2014-8180?
It affects 1 product.
Products include Mongodb Mongodb.
How do I fix CVE-2014-8180?
Apply the vendor's patch.
Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.
Is CVE-2014-8180 being exploited?
There is no known exploitation of CVE-2014-8180 in the wild and no public exploit code.
Other vulnerabilities in Mongodb Mongodb
- CVE-2025-14847 MongoDB and MongoDB Server Improper Handling of Length Parameter Inconsistency
- CVE-2026-82067 Auth bypass in MongoDB Server
- CVE-2026-13072 MongoDB Improper Input Validation in Compute Mode External Data Processing Leading to Memory Corruption
- CVE-2017-15535 Denial of service in n/a
- CVE-2026-18691 Improper Authentication in MongoDB Intra-Cluster Connections Allows Credential Exposure
Sources
Also known as GHSA-7g8m-5ff5-p3hg, MINI-4p93-qvxx-v9p8, MINI-6xjp-cxqc-c7q4, MINI-85vh-w2jg-phmp, MINI-p299-mv7p-7v3w, MINI-q6f5-mjc6-6j8q and 1 more.