News for hackers. Stuff that matters.

A comment on Finding MongoDB instances without any authentication. Parent comment

Re:Finding MongoDB instances without any authentication by achillean on Sunday July 19, 2015 @05:26PM (#9912883)
Yeah... Memcached is one of the other ones that has the same problem but around 100,000 public instances... Maybe I shouldn't have even mentioned MongoDB since everybody's so focused on it now, but this sort of configuration issue affects a ton of database products.
[ Parent | on HN ]
Re:Finding MongoDB instances without any authentication by threeseed on Sunday July 19, 2015 @10:15PM (#9913718)
It actually affects a tonne of products, period.

It's quite popular in enterprise software to listen on all interfaces.

[ Parent | on HN ]