Researchers Discover 8,000 Unprotected ‘Redis’ Instances Online

guest · Apr 3, 2020

Researchers Discover Eight Thousand Unprotected ‘Redis’ Instances Online
Redis is constantly trying to introduce fail-safes, but administrators ignore or disable them
April 3, 2020
https://www.technadu.com/researcher...and-unprotected-redis-instances-online/97610/

Trend Micro researchers report that they have discovered about 8,000 Redis instances that are not password protected and which don’t use TLS encryption. These instances are spread all over the world, and some are deployed in public clouds. All of them are indexed by specialized search engines, such as Shodan.

According to the Redis official deployment recommendations, these instances shouldn’t even be exposed to the internet in the first place, let alone be online without a TLS and password protection. Redis has introduced a special “protected mode” in version 4.0 [...] However, some administrators ignore the error messages or even disable the “protected mode” to stop the message from irritating them.

One key problem is that Redis isn’t using TLS by default, so it is up to the administrator to enable this option.
And then there is the issue of the lack of command execution limitations assigned to specific user categories. All versions prior to Redis 6.0 don’t offer this security feature, so even non-admin users are allowed to execute critical commands.
Click to expand...

Trend Micro: More Than 8,000 Unsecured Redis Instances Found in the Cloud

Log in or Sign up

Researchers Discover 8,000 Unprotected ‘Redis’ Instances Online

guest Guest

Log in or Sign up

Researchers Discover 8,000 Unprotected ‘Redis’ Instances Online

guest Guest

Useful Searches