Improper Access Control
| Property | |
|---|---|
| Language |  |
| Severity |  |
| CWE | CWE-284: Improper Access Control |
| OWASP | A05:2017 - Broken Access Control |
| Confidence Level | Low |
| Impact Level | Low |
| Likelihood Level | Low |
Description#
The configuration enables a public IP address for a Google Cloud SQL database instance, making the database accessible from the internet. This increases exposure to unauthorized access and potential attacks.
Impact#
If exploited, attackers could attempt to connect to the database from anywhere, increasing the risk of data breaches, unauthorized data manipulation, or service disruption. Exposing databases to the public internet often leads to credential brute-forcing and is a common target for automated attacks.