CVE-2021-32039
No fix known EPSS <1%CVSS 5.5
Users with appropriate file access may be able to access unencrypted user credentials saved by MongoDB Extension for VS Code in a binary file. These credentials may be used by malicious attackers to perform unauthorized actions. This vulnerability affects all MongoDB Extension for VS Code including and prior to version 0.7.0
Products: MongoDB Inc. MongoDB for VS Code, mongodb