Description

Detects Network Security Group (NSG) rules that allow unrestricted access to PostgreSQL database ports (5432). This poses a significant security risk as it exposes database servers to potential unauthorized access from any IP address on the internet, which could lead to data breaches or unauthorized database manipulation.

Detection Strategy

• Examines each security rule in Azure Network Security Groups

• Flags rules that allow inbound traffic to port 5432 (PostgreSQL) from any source IP address (0.0.0.0/0 or *)

• Reports a vulnerability when TCP or any (*) protocol is allowed from unrestricted source addresses to PostgreSQL ports