SYM_CONF_0102 - SymbioticSec/Symbiotic-Vulnerability-Database GitHub Wiki

Improper Access Control

Property Value
Language hcl
Severity low
CWE CWE-284: Improper Access Control
OWASP A05:2017 - Broken Access Control
Confidence Level Low
Impact Level Low
Likelihood Level Low

Description

The Azure App Service is missing proper authentication settings, which means users can access the service without verifying their identity. This leaves your app exposed to unauthorized access.

Impact

Without authentication, attackers or unauthorized users could gain access to sensitive resources, modify application data, or disrupt service functionality. This may lead to data breaches, service misuse, or compliance violations.