Description

Detects Azure MySQL Flexible Server instances that have firewall rules allowing overly permissive public network access. This creates a security risk by potentially exposing database servers to unauthorized access from the internet, which could lead to data breaches or unauthorized database manipulation.

Detection Strategy

• Checks if public network access is explicitly enabled on the MySQL Flexible Server

• Examines the firewall rules' start and end IP address ranges

• Reports a vulnerability if both start and end IP addresses are invalid/overly permissive, indicating possible unrestricted access

• Triggers when firewall rules are too broad or use invalid IP ranges while public access is enabled