SYM_CONF_0052 - SymbioticSec/Symbiotic-Vulnerability-Database GitHub Wiki

Improper Access Control

Property Value
Language hcl
Severity low
CWE CWE-284: Improper Access Control
OWASP A05:2017 - Broken Access Control
Confidence Level Low
Impact Level Low
Likelihood Level Low

Description

The PostgreSQL server is configured with public network access enabled, allowing anyone on the internet to attempt to connect. This setting exposes the database to unauthorized access and increases the risk of attacks.

Impact

If exploited, attackers could connect to the database from anywhere, potentially leading to data breaches, unauthorized data manipulation, or service disruption. This exposure can compromise sensitive information and undermine the security of your cloud environment.