logo

Database

Azure Oracle Unrestricted Access

Description

Detects Azure Network Security Group (NSG) rules that allow unrestricted public access to Oracle database ports (1521). Such open access from the internet to database ports creates significant security risks by potentially exposing database instances to unauthorized access and attacks.

Weakness:

157 - Unrestricted access between network segments

Category: Access Subversion

Detection Strategy

    Identifies Network Security Group rules that allow inbound traffic to port 1521

    Checks if the rule's source address is unrestricted (like '0.0.0.0/0', '*', 'Internet', or '/0')

    Verifies if the rule allows TCP or all (*) protocols

    Reports a vulnerability if any NSG rule allows unrestricted public access to the Oracle database port