Improper Access Control
| Property | |
|---|---|
| Language |  |
| Severity |  |
| CWE | CWE-284: Improper Access Control |
| OWASP | A05:2017 - Broken Access Control |
| Confidence Level | Low |
| Impact Level | Low |
| Likelihood Level | Low |
Description#
The Azure Data Factory resource is configured with public network access enabled, which allows connections from the internet. This exposes the service to unauthorized users and increases the risk of external attacks.
Impact#
If public network access is not disabled, attackers could attempt to access, manipulate, or exfiltrate data from your Data Factory instance over the internet. This could lead to data breaches, unauthorized data processing, or compromise of sensitive workflows.