MongoDB:
Vulnerability Discovery
Guides for finding auth gaps and misconfigs in MongoDB
MongoDB Unauthenticated Access
MongoDB vulnerability discovery identifies security gaps in the database deployment. Common findings include instances running without authentication enabled, exposed admin interfaces like the MongoDB HTTP console, and dangerous server configurations such as enabled scripting or unrestricted network binding.
The subpages detail how to check for these misconfigurations and determine their severity in the context of the target deployment.