Nearly 40,000 organisations running MongoDB, a NoSQL high performance and cross-platform document-oriented database, are found to be unprotected and vulnerable to hackers. Three students from University of Saarland in Germany at the Centre for IT Security Kai Greshake, Eric Petryka and Jens Heyens discovered that MongoDB databases running at TCP port 27017 as a service on several thousands of commercial web servers are easily accessible on the Internet. The German researchers said that they were able to getwithout using any special hacking tools.
Source: https://thehackernews.com/2015/02/mongodb-database-hacking.html