Description
It's possible to execute both db.shutdownServer() and rs.stepDown() without authenticating remotely even when authentication is enabled.
Attachments
Issue Links
- related to
-
DOCS-181 Mention more commands require auth in 2.0 release notes
-
- Closed
-