Docker based installations allow read-only access to the files within the Docker container.
Details
| Detail name | Value |
|---|---|
| Changelog Number | 10355 |
| Type | Bug |
| Status | Resolved |
| Affected Versions | Exasol 6.2.0, Exasol 6.1.2, Exasol 7.0.alpha1 |
| Fix Versions | Exasol 6.1.10, Exasol 6.2.8, Exasol 7.0.rc1 |
| Resolution Date | 2020-07-24 |
Description
Docker-based installations allow read-only access to any file within the Docker container via the https-port if explicitly exposed.
Other (non-Docker) installation types are not affected.
Workaround / Mitigation
- Adjust the firewall to block the https-port from outside.
- Alternatively configure docker to not expose the https-port
Fix
The fix restricts the access via https.
We recommend updating to the mentioned fix versions.
