4 ms·
I think by default mongodb has no enabled access control, so there is no default user or password.
by beermonster 5y ago
I think by default mongodb has no enabled access control, so there is no default user or password.
- pm90 5y agoHow is this acceptable… requiring a password, even a weak one might have at least bought some time in this situation.
- beermonster 5y agoSee https://acowebs.com/mongodb-security/ https://acowebs.com/mongodb-security/
- vultour 5y agoAm I misunderstanding or do people launch their Mongo container without even MONGO_INITDB_ROOT_{USERNAME,PASSWORD}? It's clearly mentioned in the image README. Takes 15 seconds to set. I'd be incredibly concerned if anybody with more than a day of infrastructure experience did this, even worse on a production database.