Skip to content

Commit ebee365

Browse files
committed
Land rapid7#2742, report_vuln for MongoDB no auth
2 parents ee0aa20 + 84f280d commit ebee365

File tree

1 file changed

+8
-0
lines changed

1 file changed

+8
-0
lines changed

modules/auxiliary/scanner/mongodb/mongodb_login.rb

Lines changed: 8 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -46,6 +46,14 @@ def run_host(ip)
4646
do_login(user, pass)
4747
}
4848
else
49+
report_vuln(
50+
:host => rhost,
51+
:port => rport,
52+
:name => "MongoDB No Authentication",
53+
:refs => self.references,
54+
:exploited_at => Time.now.utc,
55+
:info => "Mongo server has no authentication."
56+
)
4957
print_good("Mongo server #{ip.to_s} dosn't use authentication")
5058
end
5159
disconnect

0 commit comments

Comments
 (0)