ensure that updater.exe only downloads mongodb signed files

XMLWordPrintableJSON

    • Type: Task
    • Resolution: Won't Do
    • Priority: Minor - P4
    • No version
    • Affects Version/s: None
    • Component/s: None
    • Not Needed
    • Developer Tools

      Updater.exe can download any file from the internet and run it. It requires user interaction, but a malicious script can automatically download an arbitrary malicious binary and run it.

            Assignee:
            Unassigned
            Reporter:
            Kevin Mas Ruiz
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

              Created:
              Updated:
              Resolved: