Security Advisory
CVE-2016-6494
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
The client in MongoDB uses world-readable permissions on .dbshell history files, which might allow local users to obtain sensitive information by reading these files.