MongoDB, Memcache, and ElasticSearch exposed with insecure default settings
criticalsecurityUpdated Jul 2, 2021(via Exa)
Technologies:
How to detect:
MongoDB, Memcache, and ElasticSearch instances running with default configurations that are not intended to be secure, responding to internet scans. Hundreds of thousands of servers exposed, delivering over a terabyte of accessible data.
Recommended action:
Scan for internet-exposed MongoDB, Memcache, and ElasticSearch instances. Review vendor security documentation for each application and harden default configurations. Block direct internet access to database and cache service ports. Implement authentication and network-level access controls before production deployment.