Improper Access Control
| Property | |
|---|---|
| Language |  |
| Severity |  |
| CWE | CWE-284: Improper Access Control |
| OWASP | A05:2017 - Broken Access Control |
| Confidence Level | Low |
| Impact Level | Low |
| Likelihood Level | Low |
Description#
The storage account is configured to allow public access to blobs, which means anyone on the internet can read data without authentication. This setting exposes sensitive files and data to unauthorized users.
Impact#
If exploited, attackers or unauthorized individuals could access, download, or leak confidential data stored in the Azure Storage Account. This could lead to data breaches, compliance violations, and damage to the organization’s reputation.