Redis Server - Geocortex install directory

Permanently deleted user

November 14, 2019 06:09

Hi,

 

I would like to know what is the use of the Redis server which is installed with Geocortex?

 

Our IT team has highlighted a potential security flaw with its configuration and want the Redis configuration to be password protected.

 

 

Description: "The Redis server running on the remote host is not protected by password authentication. A remote attacker can exploit this to gain unauthorized access to the server."

 

 

config_file:

 

D:\Program Files\Latitude Geographics\Geocortex Core\NSRoot\Geocortex\Core\Roles\BootStrapper\2.4.1\Redis-64.2.8.17\redis.conf

 

 

Solution:

 

Enable the 'requirepass' directive in the redis.conf configuration file.

 

 

Can we make this change without braking Geocortex?

 

Can someone confirm?

 

 

Thanks in advance!

0

• 

  Mike Ketler

  November 20, 2019 15:10

  Hi,

   

   

  Which version of Essentials are you running? REDIS was removed from the Geocortex Core component of Essentials in the 4.6.x release, we moved to using Elastic Search 2.4.2 as our primary document store.

   

   

  We have not tested setting the 'requirepass' directive in the redis.conf configuration file. 

   

   

  Thanks,

   

  Mike Ketler

  0

Please sign in to leave a comment.