Data Lake Storage allows inbound access from any source instead of a restricted range Affecting Data Lake service in Azure


Severity

0.0
medium
0
10
Severity Framework
Snyk CCSS
Rule category
Network/ Access

Is your environment affected by this misconfiguration?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications
Frameworks
CIS-ControlsNIST-800-53PCI-DSSSOC-2
  • Snyk IDSNYK-CC-00528
  • creditSnyk Research Team

Description

Data Lake Storage will be potentially accessible to anyone on the internet which increases the external attack vectors.

How to fix?

Set properties.firewallRules.startIpAddress to specific IP range only, e.g. 192.168.1.0/24.

Terraform

    References