patternsqlMinor
Can see other user's databases in shared hosting
Viewed 0 times
canhostingdatabasesshareduserseeother
Problem
This looks like a security concern but I do not know enough about SQL Server to know.
Using a shared hosting service, if I go to restore a database I'm able to see other user's databases.
I'm not able to restore their database to mine so I cannot see any of their data, just their database names.
Is this a security concern?
Using a shared hosting service, if I go to restore a database I'm able to see other user's databases.
I'm not able to restore their database to mine so I cannot see any of their data, just their database names.
Is this a security concern?
Solution
I'd talk to your hosting provider's technical support people about this and get them to explain to you the security configuration they have on the
By itself, the list of database names likely does not indicate a security risk. I'd ensure I wasn't giving away any details in my database names.
If I had SQL Server Agent Jobs running where the output was logged, I'd probably be somewhat concerned about others being able to see that output, so I'd confirm that (a) I don't have SQL Server Agent jobs with output, and (b) no one else can configure SQL Server Agent jobs to run against my databases.
msdb database, which is where those details are stored.By itself, the list of database names likely does not indicate a security risk. I'd ensure I wasn't giving away any details in my database names.
If I had SQL Server Agent Jobs running where the output was logged, I'd probably be somewhat concerned about others being able to see that output, so I'd confirm that (a) I don't have SQL Server Agent jobs with output, and (b) no one else can configure SQL Server Agent jobs to run against my databases.
Context
StackExchange Database Administrators Q#137194, answer score: 4
Revisions (0)
No revisions yet.