Storage containers in blob storage mode should not have public access
| Property | |
|---|---|
| Language | |
| Severity | |
| Service | storage |
| Provider | Azure |
| Vulnerability Type | misconfiguration |
Description#
The configuration allows public access to Azure Blob Storage containers, meaning anyone on the internet can read data stored within them. This exposes potentially sensitive or private files without authentication controls.
Impact#
If exploited, attackers can freely access and download data from the storage container, leading to data leaks, exposure of confidential information, compliance violations, and potential reputational or financial damage to the organization.
Resolution#
Disable public access to storage containers