MongoDB
A document database that stores records as JSON-like data.
Where It Sits
The small stack marks its layer. Beside it, each related technology links to its own page.
- App
- Framework
- Web Server
- Runtime
- Containers
- OS
- Hypervisor
- Firmware
- Hardware
- DataMongoDB
About
MongoDB is a document database that stores records as JSON-like documents, not rows in tables. It listens on port 27017. Access control is off by default and older versions listened on every network address, so thousands were left open to the internet, wiped and held to ransom.
How to Spot It
These are signs that a system runs MongoDB, seen from outside without signing in, such as a response header, a cookie, a path or a default port. They help you find where it runs across your own estate. A version shown to the world also tells anyone scanning which flaws might apply, so it is worth hiding.
- Default port
27017 (MongoDB)- Response body
It looks like you are trying to access MongoDB over HTTP on the native driver port.
If It Has a Flaw
An exposed database hands over its records directly. MongoDB showed that a database reachable from the internet with no sign-in gets found and wiped.
Rivals
Rivals do the same job on the same layer, so a system usually runs one of them in any one place. A flaw in a rival does not reach MongoDB.
