HiveBrain v1.2.0
Get Started
← Back to all entries
patternsqlMinor

Can see other user's databases in shared hosting

Submitted by: @import:stackexchange-dba··
0
Viewed 0 times
canhostingdatabasesshareduserseeother

Problem

This looks like a security concern but I do not know enough about SQL Server to know.

Using a shared hosting service, if I go to restore a database I'm able to see other user's databases.

I'm not able to restore their database to mine so I cannot see any of their data, just their database names.

Is this a security concern?

Solution

I'd talk to your hosting provider's technical support people about this and get them to explain to you the security configuration they have on the msdb database, which is where those details are stored.

By itself, the list of database names likely does not indicate a security risk. I'd ensure I wasn't giving away any details in my database names.

If I had SQL Server Agent Jobs running where the output was logged, I'd probably be somewhat concerned about others being able to see that output, so I'd confirm that (a) I don't have SQL Server Agent jobs with output, and (b) no one else can configure SQL Server Agent jobs to run against my databases.

Context

StackExchange Database Administrators Q#137194, answer score: 4

Revisions (0)

No revisions yet.