CVE-2017-2665 Hardcoded credentials in rhscon-core
Local users can read the plain-text MongoDB password from a world-readable configuration file, allowing unauthorized database access.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- A user has to click or open something
- Fix
- Available
What is CVE-2017-2665?
CVE-2017-2665 is a medium-severity vulnerability in Mongodb Mongodb, published on 6 Jul 2018. It can only be exploited from the same machine or local network, and only if a user opens a file or follows a link.
Official description
The skyring-setup command creates random password for mongodb skyring database but it writes password in plain text to /etc/skyring/skyring.conf file which is owned by root but read by local user. Any local user who has access to system running skyring service will be able to get password in plain text.
Weakness: CWE-522
Which versions are affected by CVE-2017-2665?
It affects 2 products.
Products include Mongodb Mongodb, Redhat Storage Console.
How do I fix CVE-2017-2665?
Apply the vendor's patch.
Is CVE-2017-2665 being exploited?
There is no known exploitation of CVE-2017-2665 in the wild and no public exploit code.
Other vulnerabilities in Mongodb Mongodb
- CVE-2025-14847 MongoDB and MongoDB Server Improper Handling of Length Parameter Inconsistency
- CVE-2026-82067 Auth bypass in MongoDB Server
- CVE-2026-13072 MongoDB Improper Input Validation in Compute Mode External Data Processing Leading to Memory Corruption
- CVE-2017-15535 Denial of service in n/a
- CVE-2026-18691 Improper Authentication in MongoDB Intra-Cluster Connections Allows Credential Exposure
Sources
Also known as GHSA-532c-wf5h-wp4m, MINI-9fq8-xff5-hjr2, MINI-hpq6-4c5h-qj44, MINI-p96x-jg8h-382g, MINI-p9wq-2r82-722w, MINI-qrc7-v93p-r623 and 1 more.