2 ms·
Redis doesn't accept unauthenticated external connections by default for a while now, specifically to try and eliminate this footgun. https://github.com/redis/
by slavak 5y ago
Redis doesn't accept unauthenticated external connections by default for a while now, specifically to try and eliminate this footgun.
https://github.com/redis/redis/commit/edd4d555df57dc84265fdfb4ef59a4678832f6da https://github.com/redis/redis/commit/edd4d555df57dc84265fdf...
- dawnerd 5y agoInteresting, this definitely happened with a more recent version... Wonder if theres some other exploit at play too (could also be the containerized version?)
- SilverRed 5y agoI had an issue where I used the redis docker image and didn't understand docker networking properly so I set the network mode as host so my other container could connect. Not knowing this had exposed redis to the world unauthenticated (in about 2018). Eventually a kind script set a password on redis which caused me to notice and fix this issue.