{"metadata": {"vulnerability": "cve-2025-3085", "count": 31, "kinds": {"milestone": 9, "sighting": 5, "kev": 0, "other": 17}}, "data": [{"timestamp": "2025-04-01T00:00:00Z", "date_only": true, "value": "2025-04-01", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0267", "record": "CERTFR-2025-AVI-0267", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2025-04-01T09:16:00Z", "date_only": false, "value": "2025-04-01T09:16:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / mongodb", "record": "cve-2025-3085", "field": "containers.cna.datePublic"}, {"timestamp": "2025-04-01T09:16:34.872Z", "date_only": false, "value": "2025-04-01T09:16:34.872Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2025-3085", "field": "cveMetadata.dateReserved"}, {"timestamp": "2025-04-01T12:05:05.401Z", "date_only": false, "value": "2025-04-01T12:05:05.401Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2025-3085", "field": "cveMetadata.datePublished"}, {"timestamp": "2025-04-01T12:05:05.401Z", "date_only": false, "value": "2025-04-01T12:05:05.401Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / mongodb", "record": "cve-2025-3085", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2025-04-01T12:15:00Z", "date_only": false, "value": "2025-04-01T12:15:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2025-3085", "record": "UBUNTU-CVE-2025-3085", "field": "published"}, {"timestamp": "2025-04-01T12:15:16Z", "date_only": false, "value": "2025-04-01T12:15:16Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-V8J7-GW8H-M2J4", "record": "GHSA-V8J7-GW8H-M2J4", "field": "database_specific.nvd_published_at"}, {"timestamp": "2025-04-01T12:15:16.187Z", "date_only": false, "value": "2025-04-01T12:15:16.187", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-3085", "record": "FKIE_CVE-2025-3085", "field": "published"}, {"timestamp": "2025-04-01T12:30:35Z", "date_only": false, "value": "2025-04-01T12:30:35Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-V8J7-GW8H-M2J4", "record": "GHSA-V8J7-GW8H-M2J4", "field": "published"}, {"timestamp": "2025-04-01T12:32:29Z", "date_only": false, "value": "2025-04-01T12:32:29.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/9876", "record": "CVE-2025-3085", "field": "creation_timestamp", "uuid": "a9640562-84e9-4742-bbdf-789063071a6f", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-3085\n\ud83d\udd25 CVSS Score: 8.1 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: A MongoDB server under specific conditions running on Linux with TLS and CRL revocation status checking enabled, fails to check the revocation status of the intermediate certificates in the peer's certificate chain. In cases of MONGODB-X509, which is not enabled by default, this may lead to improper authentication. This issue may also affect intra-cluster authentication. This issue affects MongoDB Server v5.0 versions prior to 5.0.31, MongoDB Server v6.0 versions prior to 6.0.20, MongoDB Server v7.0 versions prior to 7.0.16 and MongoDB Server v8.0 versions prior to 8.0.4.\nRequired Configuration :\u00a0MongoDB Server must be running on Linux Operating Systems and CRL revocation status checking must be enabled\n\ud83d\udccf Published: 2025-04-01T12:05:05.401Z\n\ud83d\udccf Modified: 2025-04-01T12:05:05.401Z\n\ud83d\udd17 References:\n1. https://jira.mongodb.org/browse/SERVER-95445", "url": "https://t.me/DarkWebInformer_CVEAlerts/9876"}, {"timestamp": "2025-04-01T13:02:43.439Z", "date_only": false, "value": "2025-04-01T13:02:43.439177Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2025-3085", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2025-04-01T13:02:43.439Z", "date_only": false, "value": "2025-04-01T13:02:43.439177Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-3085", "record": "FKIE_CVE-2025-3085", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-04-01T13:03:02.701Z", "date_only": false, "value": "2025-04-01T13:03:02.701Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2025-3085", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-04-01T13:03:02.701Z", "date_only": false, "value": "2025-04-01T13:03:02.701Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2025-3085", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-04-01T13:48:33.691Z", "date_only": false, "value": "2025-04-01T13:48:33.691350Z", "kind": "sighting", "label": "Seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114263019339403950", "record": "CVE-2025-3085", "field": "creation_timestamp", "uuid": "cd7570e9-a3aa-4964-aa54-5479f97194b7", "url": "https://mastodon.social/users/CyberSignaler/statuses/114263019339403950"}, {"timestamp": "2025-04-01T13:48:33.699Z", "date_only": false, "value": "2025-04-01T13:48:33.699320Z", "kind": "sighting", "label": "Seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114263019339403950", "record": "CVE-2025-3085", "field": "creation_timestamp", "uuid": "9555df24-9351-48f1-9ef1-98a65824d0c3", "url": "https://mastodon.social/users/CyberSignaler/statuses/114263019339403950"}, {"timestamp": "2025-04-01T16:23:13Z", "date_only": false, "value": "2025-04-01T16:23:13.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cvedetector/21748", "record": "CVE-2025-3085", "field": "creation_timestamp", "uuid": "98bc867c-d24c-4a2b-a570-1bb961648d99", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-3085 - MongoDB TLS Intermediate Certificate Revocation Status Checking Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-3085 \nPublished : April 1, 2025, 12:15 p.m. | 1\u00a0hour, 13\u00a0minutes ago \nDescription : A MongoDB server under specific conditions running on Linux with TLS and CRL revocation status checking enabled, fails to check the revocation status of the intermediate certificates in the peer's certificate chain. In cases of MONGODB-X509, which is not enabled by default, this may lead to improper authentication. This issue may also affect intra-cluster authentication. This issue affects MongoDB Server v5.0 versions prior to 5.0.31, MongoDB Server v6.0 versions prior to 6.0.20, MongoDB Server v7.0 versions prior to 7.0.16 and MongoDB Server v8.0 versions prior to 8.0.4.  \nRequired Configuration :\u00a0MongoDB Server must be running on Linux Operating Systems and CRL revocation status checking must be enabled \nSeverity: 8.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"01 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "url": "https://t.me/cvedetector/21748"}, {"timestamp": "2025-04-01T22:00:00Z", "date_only": false, "value": "2025-04-01T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0680", "record": "WID-SEC-W-2025-0680", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2025-04-01T22:00:00Z", "date_only": false, "value": "2025-04-01T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0680", "record": "WID-SEC-W-2025-0680", "field": "document.tracking.initial_release_date"}, {"timestamp": "2025-04-01T22:00:00Z", "date_only": false, "value": "2025-04-01T22:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0680", "record": "WID-SEC-W-2025-0680", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2025-04-01T22:00:00Z", "date_only": false, "value": "2025-04-01T22:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0680", "record": "WID-SEC-W-2025-0680", "field": "document.tracking.current_release_date"}, {"timestamp": "2025-04-02T00:00:00Z", "date_only": false, "value": "2025-04-02T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0267", "record": "CERTFR-2025-AVI-0267", "field": "last_revision_date"}, {"timestamp": "2025-04-02T00:00:00Z", "date_only": false, "value": "2025-04-02T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0267", "record": "CERTFR-2025-AVI-0267", "field": "initial_release_date"}, {"timestamp": "2025-04-02T00:00:00Z", "date_only": false, "value": "2025-04-02T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0267", "record": "CERTFR-2025-AVI-0267", "field": "revisions.0.revision_date"}, {"timestamp": "2025-04-02T09:49:46.177Z", "date_only": false, "value": "2025-04-02T09:49:46.177+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0680", "record": "WID-SEC-W-2025-0680", "field": "document.tracking.generator.date"}, {"timestamp": "2025-04-02T23:09:18.248Z", "date_only": false, "value": "2025-04-02T23:09:18.248407Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/omo.bsky.social/post/3lluiyzj2ms2x", "record": "CVE-2025-3085", "field": "creation_timestamp", "uuid": "d23066ef-26ee-4bdc-a54f-9bee3e4f1db5", "url": "https://bsky.app/profile/omo.bsky.social/post/3lluiyzj2ms2x"}, {"timestamp": "2025-09-24T18:30:23Z", "date_only": false, "value": "2025-09-24T18:30:23Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-V8J7-GW8H-M2J4", "record": "GHSA-V8J7-GW8H-M2J4", "field": "modified"}, {"timestamp": "2025-09-25T08:47:27.812Z", "date_only": false, "value": "2025-09-25T08:47:27.812Z", "kind": "milestone", "label": "Published", "source": "bitnami_vulndb \u00b7 BIT-MONGODB-2025-3085", "record": "BIT-MONGODB-2025-3085", "field": "published"}, {"timestamp": "2026-04-22T07:53:18Z", "date_only": false, "value": "2026-04-22T07:53:18Z", "kind": "other", "label": "Updated", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2025-3085", "record": "UBUNTU-CVE-2025-3085", "field": "modified"}, {"timestamp": "2026-06-17T09:19:09.917Z", "date_only": false, "value": "2026-06-17T09:19:09.917", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-3085", "record": "FKIE_CVE-2025-3085", "field": "lastModified"}, {"timestamp": "2026-09-08T08:34:36.952Z", "date_only": false, "value": "2026-09-08T08:34:36.952Z", "kind": "other", "label": "Updated", "source": "bitnami_vulndb \u00b7 BIT-MONGODB-2025-3085", "record": "BIT-MONGODB-2025-3085", "field": "modified"}]}
