11-23-2020, 12:27 AM
Hi,
Moode has an active SMB Server with the guest account setup as root user, providing open access to many directories in the system as "root".
One of the exposed directories are remote media libraries that may have been added to Moode. While these may originally have credentials when added, these then become fully available without any authentication within the Local Network through the Moode SMB Server.
This looks like a security issue and what I'm wondering is why does Moode even requires a SMB Server?
Thanks!
Moode has an active SMB Server with the guest account setup as root user, providing open access to many directories in the system as "root".
One of the exposed directories are remote media libraries that may have been added to Moode. While these may originally have credentials when added, these then become fully available without any authentication within the Local Network through the Moode SMB Server.
This looks like a security issue and what I'm wondering is why does Moode even requires a SMB Server?
Thanks!
