An authentication bypass in Progress MarkLogic Server allows unauthenticated remote attackers to execute arbitrary queries with elevated privileges.

The flaw resides in the ODBC App Server component and allows an unauthenticated remote attacker to bypass password verification. This permits the execution of database queries using the permissions of any known user, including administrative accounts.

Successful exploitation allows an attacker to bypass security controls entirely, leading to unauthorized access to sensitive data, data manipulation, or administrative system takeovers. The CVSS score of 9.8 reflects the high risk of this vulnerability, which could result in severe data breaches and loss of system integrity.

Immediate Action: Update MarkLogic Server to version 11.3.6, 12.0.3, or later as specified in the vendor security advisory.

Proactive Monitoring: Audit database logs for unauthorized query patterns or unexpected access by administrative accounts originating from external IP addresses.

Compensating Controls: Restrict network access to the ODBC App Server port to trusted internal IP addresses only, using host-based firewalls or network access control lists.

Public Exploit Available: Unknown.

This is a critical vulnerability that requires immediate attention for all deployments of MarkLogic Server. Administrators should apply the provided vendor patches as soon as possible to prevent potential unauthorized database access and data exfiltration.