SYM_CONF_0069 - SymbioticSec/Symbiotic-Vulnerability-Database GitHub Wiki

Improper Access Control

Property Value
Language hcl
Severity low
CWE CWE-284: Improper Access Control
OWASP A05:2017 - Broken Access Control
Confidence Level Low
Impact Level Low
Likelihood Level Low

Description

The storage account is configured to allow public access to blobs, which means anyone on the internet can read data without authentication. This setting exposes sensitive files and data to unauthorized users.

Impact

If exploited, attackers or unauthorized individuals could access, download, or leak confidential data stored in the Azure Storage Account. This could lead to data breaches, compliance violations, and damage to the organization's reputation.