Improper Access Control
| Property | |
|---|---|
| Language |  |
| Severity |  |
| CWE | CWE-284: Improper Access Control |
| OWASP | A05:2017 - Broken Access Control |
| Confidence Level | Low |
| Impact Level | Low |
| Likelihood Level | Low |
Description#
The Google Data Fusion instance is deployed without Stackdriver logging enabled. This means that important logs and audit trails for the instance’s activity are not being recorded.
Impact#
Without Stackdriver logging, suspicious or unauthorized actions within the Data Fusion instance may go undetected, making it difficult to investigate security incidents or comply with audit requirements. This can increase the risk of undetected misuse or breaches.