Unprotected memcached

medium Nessus Plugin ID 52633

Language:

Synopsis

Memcached is running on a public IP address.

Description

Memcached is a memory-based object store. As it is designed for performance, this program does not contain any security mechanism (ie: authentication), meaning that anyone can connect to this server and perform queries against it.

Solution

Make sure that the machine is properly protected by a firewall and that traffic to the port is restricted to authorized hosts.

Plugin Details

Severity: Medium

ID: 52633

File Name: unprotected_memcached.nasl

Version: 1.6

Type: remote

Family: General

Published: 3/11/2011

Updated: 11/15/2018

Supported Sensors: Nessus

Vulnerability Information

Required KB Items: Services/memcached

Detections

Analytics