SYM_CONF_0106 - SymbioticSec/Symbiotic-Vulnerability-Database GitHub Wiki

Insufficient Logging

Property Value
Language hcl
Severity low
CWE CWE-778: Insufficient Logging
OWASP A10:2017 - Insufficient Logging & Monitoring
Confidence Level Low
Impact Level Low
Likelihood Level Low

Description

The storage account is missing logging configuration for queue services. Without proper logging, important details about queue operations (such as access and errors) are not recorded.

Impact

Lack of logging makes it difficult to detect and investigate unauthorized access, operational issues, or potential attacks on your storage queues. This can lead to delayed incident response and hinder compliance or auditing efforts.