TF 0313 - SymbioticSec/Symbiotic-Vulnerability-Database GitHub Wiki
Ensure databases are not publicly accessible
Property | Value |
---|---|
Language | |
Severity | |
Service | database |
Provider | Azure |
Vulnerability Type | omission |
Description
Database resources are configured to allow public network access, exposing them to the internet. This increases the risk of unauthorized access by bypassing network-level restrictions.
Impact
If exploited, attackers could connect to the database from anywhere on the internet, potentially leading to data breaches, data loss, or manipulation of sensitive information. This exposure may also make the database a target for automated attacks and exploits.
Resolution
Disable public access to database when not required