TF 0313 - SymbioticSec/Symbiotic-Vulnerability-Database GitHub Wiki

Ensure databases are not publicly accessible

Property Value
Language terraform
Severity medium
Service database
Provider Azure
Vulnerability Type omission

Description

Database resources are configured to allow public network access, exposing them to the internet. This increases the risk of unauthorized access by bypassing network-level restrictions.

Impact

If exploited, attackers could connect to the database from anywhere on the internet, potentially leading to data breaches, data loss, or manipulation of sensitive information. This exposure may also make the database a target for automated attacks and exploits.

Resolution

Disable public access to database when not required