Misconfiguration Vulnerabilities

---

Vulnerabilities

• cloud environment misconfigurations
  • improperly managed access permissions on storage buckets
  • default settings that leave data storage or compute instances publicly accessible
• Default configurations of systems, applications, or devices
  • default credentials
• overly permissive configurations
  • focus on usability and potentially expose sensitive information

Remediation

• configure systems, devices, and applications according to the principle of least privilege and published best practices
• changing default login credentials
• tightening access controls
• regularly auditing configurations to ensure ongoing security
• best practices for change management