Homepage

VPC security group rule permits ingress from '0.0.0.0/0' to port 2382 (SQL Server Analysis Services browser) Affecting VPC service in AWS

Severity

0.0
medium
0
10
Severity Framework
Snyk CCSS
Rule category
Network/ Ports

Is your environment affected by this misconfiguration?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications
Frameworks
  • Snyk IDSNYK-CC-00140
  • creditSnyk Research Team
Report a new misconfiguration Found a mistake?

Description

Removing unfettered connectivity to a SQL Server Analysis Services Browser server reduces the chance of exposing critical data.

How to fix?

Set the ingress.cidr_blocks attribute with a more restrictive CIDR block, for example 192.168.1.0/24.

Example configuration:

resource "aws_security_group" "allow_some_cidr_valid" {
  name        = "allow_some_cidr_valid"
  description = "Allow from valid CIDR"

  ingress {
    from_port   = 2382
    to_port     = 2382
    protocol    = "tcp"
    cidr_blocks = ["192.168.1.0/24"]
  }
}