What’s more - the attackers exploiting MongoBleed do not need valid credentials to pull the attack off. In its writeup, ...