SYM_CONF_0224 - SymbioticSec/Symbiotic-Vulnerability-Database GitHub Wiki

Missing Encryption of Sensitive Data

Property Value
Language hcl
Severity low
CWE CWE-311: Missing Encryption of Sensitive Data
OWASP A03:2017 - Sensitive Data Exposure
Confidence Level Low
Impact Level Low
Likelihood Level Low

Description

Ensure FSX Lustre file system is encrypted at rest using KMS CMKs. CMKs gives you control over the encryption key in terms of access and rotation.