NoSQL Breakdown: A Large-scale Analysis of Misconfigured NoSQL Services
Dario Ferrari, Michele Carminati, Mario Polino, Stefano Zanero · Annual Computer Security Applications Conference · 2020
In the last years, NoSQL databases have grown in popularity due to their easy-to-deploy, reliable, and scalable storage mechanism. While most NoSQL services offer access control mechanisms, their default configurations grant access without any form of authentication, resulting in misconfigurations that may expose data to the Internet, as demonstrated by the recent high-profile data leaks.