Tag: ACL
Redis ACL (NOPERM) permission-denied events.
| ID | Title | Description | Category | Technology | Tags |
|---|---|---|---|---|---|
| CRE-2025-0072 Critical Impact: 10/10 Mitigation: 7/10 | Redis Out-Of-Memory → Persistence Crash → Replica/ACL Write Failures | Detects a cascade of critical Redis failure modes in a single session: - Redis refuses writes when maxmemory is exceeded (OOM). - RDB snapshot (BGSAVE) fails (MISCONF) due to simulated full-disk. - Replica refuses writes (READONLY). - ACL denies a write (NOPERM). | In-Memory Database Problems | redis | RedisOut of MemoryPersistenceRDBMISCONFREADONLYACLSecurity |
| CRE-2025-0174 Critical Impact: 7/10 Mitigation: 8/10 | Redis Authentication Failures and ACL Permission Denials | Detects Redis authentication failures including wrong passwords, missing authentication, and ACL permission denials. These errors prevent legitimate clients from accessing Redis and may indicate security misconfigurations or attempted unauthorized access. | In-Memory Database Problems | redis | RedisAuthenticationSecurityACLWrong Password |
| CRE-2025-0200 Critical Impact: 10/10 Mitigation: 7/10 | Redis Comprehensive Troubleshooting - Multiple Common Issues Detection | Comprehensive detection rule for multiple common Redis troubleshooting scenarios including: 1. Out-of-Memory (OOM) errors when maxmemory limit exceeded 2. Connection timeouts and connectivity issues 3. Authentication failures and permission denials 4. Invalid commands and argument errors 5. Background save (BGSAVE) conflicts and persistence issues 6. Slow query performance problems 7. Read-only replica write attempts 8. Disk persistence failures (MISCONF errors) 9. Client connection limits exceeded 10. Memory pressure and eviction warnings | In-Memory Database Problems | redis | RedisRedis CLIRedis PyOut of MemoryConnectionAuthenticationPersistencePerformanceREADONLYMISCONFACLPublic |