Uploaded image for project: 'Core Server'
  1. Core Server
  2. SERVER-53064

Connections created using transient SSL params should not be stored in the global DBConnectionPool - security risk

    • Fully Compatible
    • Sharding 2021-01-25, Sharding 2021-02-22

      The global DBConnectionPool keeps reusable connections. If a connection was created using transient SSL params, it should not be recycled into this pool, because it can be picked from some other code logic and that will be a security risk.

            Assignee:
            andrew.shuvalov@mongodb.com Andrew Shuvalov (Inactive)
            Reporter:
            andrew.shuvalov@mongodb.com Andrew Shuvalov (Inactive)
            Votes:
            0 Vote for this issue
            Watchers:
            4 Start watching this issue

              Created:
              Updated:
              Resolved: