Skip to content

Neo4j in Docker needs to be secured  #13

@Cougar

Description

@Cougar

This line

- NEO4J_AUTH=none # Neo4j authentication is disabled for Docker installation

makes Neo4j open for anyone in the world (if you are not behind firewall/NAT). It should either not use 'host' network, listen 127.0.0.1 or should be secured with password/firewall but current setup is insecure.

Metadata

Metadata

Assignees

Labels

sec-bugSecurity Vulnerability

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions