Homepage
About Snyk

Data Lake Storage allows inbound access from any source instead of a restricted range Affecting Data Lake service in Azure

Severity

0.0
medium
0
10
    Severity Framework
    Snyk CCSS
    Rule category
    Network / Access

Is your enviroment affected by this misconfiguration?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications
    Frameworks
    CIS-Controls NIST-800-53 PCI-DSS SOC-2
  • Snyk ID SNYK-CC-00528
  • credit Snyk Research Team
Report a new misconfiguration Found a mistake?

Description

Data Lake Storage will be potentially accessible to anyone on the internet which increases the external attack vectors.

How to fix?

Set properties.firewallRules.startIpAddress to specific IP range only, e.g. 192.168.1.0/24.

Terraform

    References