Unrestricted access between network segments

Description

The current network configuration lacks access restrictions between network segments, which would allow an attacker to access privileged server segments or services from unauthorized networks.

Impact

Obtain unauthorized access to network traffic.

Recommendation

Segment the corporate network using the principle of least privilege necessary to limit access to the database.

Threat

Unauthorized user in local network.

Expected Remediation Time

⏱️ 60 minutes.

Requirements

255 - Allow access only to the necessary ports

Rules

Terraform Unrestricted Rpc Port 135 Dart Io Httpserver Insecure Bind Terraform Public Network Enabled True Dart Shelf Server Insecure Bind Terraform Unrestricted Ssh Access Terraform Broad Network Access Terraform Default Action Allow Key Vault Terraform Nsg Mssql Port Exposed Terraform Default Action Allow Go Trust Proxy On Terraform Bypass None Unrestricted Access Terraform Nsg Mongodb Public Access Terraform Nsg Postgresql Port Exposed Terraform Security Group Oracle Port Exposed Terraform Unrestricted Netbios Access

Fixes

Azure Go Helm Java Scala