TF 0081 - SymbioticSec/Symbiotic-Vulnerability-Database GitHub Wiki
Missing description for nas security group.
Property | Value |
---|---|
Language | |
Severity | |
Service | nas |
Provider | Nifcloud |
Description
NAS security groups are defined without a description, making it unclear what each group is intended to protect or allow. This lack of context complicates understanding and managing firewall rules.
Impact
Missing descriptions hinder effective auditing and troubleshooting, increasing the risk of misconfigurations or unused rules being overlooked. This can lead to unauthorized access or operational disruptions due to unclear security group purposes.
Resolution
Add descriptions for all nas security groups