Is it so easy to hack mongodb database?
I created a mongodb database and added users. If I want to allow access only to these users I need to add the following parameters to the config file:
security: authorization: enabled setParameter: authenticationMechanisms: SCRAM-SHA-1
After adding those parameters to the config file, the database requires authentication.
But a hacker can simply remove the security section from the config file and access all the stored data. Am I missing something?