logo

Database

Azure Redis Public Network Access Enabled

Description

Detects Azure Redis Cache instances that have public network access enabled. When public network access is enabled without proper restrictions, the Redis Cache instance is potentially accessible from the internet, increasing the risk of unauthorized access and data exposure.

Weakness:

446 - Insecure service configuration - Azure

Category: Functionality Abuse

Detection Strategy

    Scans all Azure Redis Cache instances in the subscription

    Checks if the 'public_network_access' setting is set to 'Enabled'

    Reports a vulnerability if public network access is enabled, as this configuration could expose the Redis Cache to internet access

Severity v4.0

1.7

Low

Method ID

CSPM-EEPUC

Technique

CSPM

Target

AZURE

Technology

REDIS

CWE ID(s)

CWE-1188