{"id":"EUVD-2025-34070","revision":"e2d0773cfeb049d1826e460e405b3499","records":[{"revision":"e2d0773cfeb049d1826e460e405b3499","observedAt":"2026-11-02T23:59:25.556+00:00","statement":{"source":"euvd","id":"EUVD-2025-34070","aliases":["CVE-2025-11695","GHSA-3p6w-gv5g-xjw9"],"title":"When tlsInsecure=False appears in a connection string, certificate validation is disabled.","description":"When tlsInsecure=False appears in a connection string, certificate validation is disabled.\n\nThis vulnerability affects MongoDB Rust Driver versions prior to v3.2.5","state":0,"publishedAt":null,"modifiedAt":null,"affected":[],"metrics":[{"system":"EUVD CVSS 3.1","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N","score":8,"severity":null}],"references":["https://jira.mongodb.org/browse/RUST-2264"],"sourceUrl":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-34070","license":"ENISA EUVD · source terms and attribution apply","enrichment":{"sourceStatus":null,"weaknesses":[],"productCriteria":[],"sourceDates":{"datePublished":"Oct 13, 2025, 4:22:57 PM","dateUpdated":"Feb 26, 2026, 5:47:45 PM"},"relatedAdvisories":[],"note":"EUVD source date text has no stated timezone and is retained without inventing a UTC instant. Related bulletin membership is not an alias, common cause or applicability claim. A missing vector with a zero score is treated as unrated. Complete vendor/product and underlying source evidence remains in the original JSON."},"key":"euvd:EUVD-2025-34070","identifiers":["EUVD-2025-34070","CVE-2025-11695","GHSA-3p6w-gv5g-xjw9"]},"retained":false,"historicalAffected":[]}],"coverage":[]}