CVE-2020-7927: 
MongoDB Ops Manager vulnerability analysis and mitigation

A privilege escalation vulnerability exists in Ops Manager that allows authenticated users with Organization Owner privileges to obtain an API key with Global Role through specially crafted API calls (NVD). The vulnerability was discovered and disclosed in November 2020.

The vulnerability is tracked as CVE-2020-7927 and affects Ops Manager's API key management system. The vulnerability allows authenticated users who already have Organization Owner privileges to escalate their permissions by obtaining an API key with Global Role access through specially crafted API calls (NVD).

The successful exploitation of this vulnerability could allow authenticated users with Organization Owner privileges to gain elevated access through an API key with Global Role permissions, potentially leading to unauthorized access to system-wide configurations and resources (NVD).

The vulnerability requires an authenticated user with Organization Owner privileges to exploit, indicating a relatively high level of existing access is needed before exploitation is possible (NVD).