Description

Detects Azure PostgreSQL databases with disabled logging configurations that could impact security monitoring capabilities. This vulnerability indicates that critical logging parameters like connection tracking, query duration monitoring, or checkpoint logging are disabled, which reduces audit trail effectiveness and security visibility.

Detection Strategy

• Checks if log_checkpoints parameter is disabled in PostgreSQL server configuration

• Verifies if log_connections parameter is disabled, preventing tracking of new connections

• Confirms if log_disconnections parameter is disabled, which prevents tracking of session terminations

• Examines if log_duration parameter is disabled, which prevents monitoring of query execution times