Description

Detects Azure PostgreSQL Flexible Servers configured with firewall rules that allow unrestricted public network access. Such configurations expose the database server to potential unauthorized access from the internet, increasing the risk of data breaches and unauthorized database access.

Detection Strategy

• Checks if public network access is explicitly enabled on the PostgreSQL Flexible Server

• Examines the firewall rules' start and end IP address ranges

• Reports a vulnerability when public access is enabled and IP ranges are not properly restricted to specific addresses or ranges