TF 0463 - SymbioticSec/Symbiotic-Vulnerability-Database GitHub Wiki

Storage containers in blob storage mode should not have public access

Property Value
Language terraform
Severity high
Service storage
Provider Azure
Vulnerability Type misconfiguration

Description

The configuration allows public access to Azure Blob Storage containers, meaning anyone on the internet can read data stored within them. This exposes potentially sensitive or private files without authentication controls.

Impact

If exploited, attackers can freely access and download data from the storage container, leading to data leaks, exposure of confidential information, compliance violations, and potential reputational or financial damage to the organization.

Resolution

Disable public access to storage containers