Skip to content

Access Control: InfluxDB Authentication Disabled

Identifier: influxdb_no_auth

Scanner Support

GraphQL Scanner REST Scanner WebApp Scanner ASM Scanner Automated Pentest

Description

InfluxDB services without authentication can allow unauthenticated users to query or alter time-series data.

How we test: We attempt a benign InfluxDB request without credentials and report the issue when the server accepts unauthenticated access.

Configuration

Example

Example configuration:

---
security_tests:
  influxdb_no_auth:
    skip: false

Reference

skip

Type: boolean

Skip the test if true.