logo

Database

Azure Sql Firewall Allows Public Access

Description

Detects Azure SQL Database instances with firewall rules that allow broad public network access. This configuration could expose database instances to unauthorized access from the internet, increasing the risk of data breaches and unauthorized access attempts.

Weakness:

446 - Insecure service configuration - Azure

Category: Functionality Abuse

Detection Strategy

    Public network access is enabled on the Azure SQL Database instance

    Firewall rules include start and end IP addresses that are not valid private IP ranges

    Both start_ip_address and end_ip_address fields are present in the firewall configuration