How to remediate vulnerabilities for MongoDB as it relates to SmartDeploy
Overview
MongoDB is the database that is used by the SmartDeploy Desktop application.
To remediate vulnerability findings with MongoDB, SmartDeploy customers must upgrade MongoDB to a supported, patched release.
Resolution
We recommend updating MongoDB to the latest 8.0.xx version. As of this writing, the latest version is 8.0.24. Please do not update to 8.2.xx or 8.3.xx as those have not yet been validated with SmartDeploy.
Download the latest version of MongoDB 8.0.xx
Use the following direct download link for Windows (x86_64):
https://fastdl.mongodb.org/windows/mongodb-windows-x86_64-8.0.24-signed.msi
Installation Steps
Close the SmartDeploy application on the console host system.
Open Apps & Features (or Programs and Features) in Windows.
Uninstall the currently installed version of MongoDB.
Install MongoDB version 8.0.xx using the installer linked above.
Restart the SmartDeploy console host system.
Launch SmartDeploy and log in to confirm normal operation.
Important Notes
MongoDB versions newer than 8.0.xx have not been fully tested with SmartDeploy at the time of this writing.
Do not upgrade past version 8.0.xx.If the system that you run the SmartDeploy console application from has a processor that does not support AVX2, you will need to use MongoDB 7.0.28. Same installations steps as above, but use the below link to 7.0.28.
https://fastdl.mongodb.org/windows/mongodb-windows-x86_64-7.0.28-signed.msiInstalling unsupported MongoDB versions may result in application instability or data issues.
Additional Information
For more details about MongoDB vulnerabilities, refer to the following resources:
