Cloud Weaknesses 31 articles

Overview Cloud Access Token Leakage occurs when authentication tokens used to access cloud services are unintentionally exposed or disclosed. This vulnerability arises from improper handling, storage, or transmission of tokens,…

Overview Cloud API rate-limit weaknesses occur when cloud service APIs fail to properly enforce limits on the number of requests a client can make within a certain timeframe. This vulnerability…

Overview Cloud automation abuse refers to the exploitation of automated cloud management tools and processes to gain unauthorized access, escalate privileges, or manipulate cloud resources. This vulnerability arises when attackers…

Overview Cloud backup and snapshot exposure refers to the unintended public or unauthorized accessibility of backup data and snapshots stored in cloud environments. This vulnerability arises when security controls are…

Overview Cloud Control Plane Exposure refers to the vulnerability that occurs when unauthorized access to the management layer of cloud services is possible. This exposure arises from misconfigurations, insufficient access…

Overview Cloud Identity Federation Misuse occurs when attackers exploit weaknesses in the trust relationships between identity providers and cloud service providers. This misuse arises from improper configuration, excessive permissions, or…

Overview Cloud Metadata Service Exposure is a vulnerability that occurs when unauthorized users gain access to cloud instance metadata services, which provide sensitive information about the cloud environment and credentials.…

Overview Cloud region misconfiguration occurs when cloud resources are deployed or managed in incorrect or unintended geographic locations. This vulnerability arises from improper settings during cloud infrastructure setup, leading to…

Overview Cross-tenant data leakage risks occur when sensitive information from one tenant in a multi-tenant environment is inadvertently or maliciously accessed by another tenant. This vulnerability arises due to misconfigurations,…

Overview Excessive cloud service permissions occur when users, applications, or services are granted more access rights than necessary within a cloud environment. This vulnerability arises from improper configuration or lack…

Overview Inadequate cloud logging and auditing refers to the insufficient collection, storage, and analysis of logs generated by cloud-based systems and services. This weakness arises when organizations fail to implement…

Overview Insecure Cloud API Exposure refers to vulnerabilities that arise when cloud service APIs are improperly secured, allowing unauthorized access or manipulation. This weakness typically occurs due to misconfigurations, insufficient…

Overview Insecure cloud marketplace images refer to pre-configured virtual machine or container images available through cloud service provider marketplaces that contain vulnerabilities or misconfigurations. These weaknesses arise when images are…

Overview Insecure cloud service integrations occur when cloud-based applications or services are connected without adequate security controls, leading to vulnerabilities. These weaknesses arise from misconfigurations, insufficient authentication, or improper handling…

Overview Insecure SaaS configuration defaults occur when software-as-a-service (SaaS) applications are deployed with default settings that do not prioritize security. These default configurations may expose sensitive data, allow excessive user…

Overview Insecure serverless function configuration refers to the improper setup or management of serverless computing functions that can lead to vulnerabilities. This weakness arises when permissions, environment variables, or runtime…

Overview Insufficient Cloud Resource Tagging refers to the lack of adequate or consistent metadata labels applied to cloud assets, which impedes effective management, security monitoring, and governance. This weakness arises…

Overview Lack of cloud asset inventory refers to the absence or inadequacy of a comprehensive and up-to-date record of all cloud-based resources and services within an organization. This weakness arises…

Overview Lack of cloud posture governance refers to the absence or inadequacy of policies, controls, and oversight mechanisms to manage and secure cloud infrastructure configurations. This weakness arises when organizations…

Overview Misconfigured cloud security groups occur when access control rules within cloud environments are improperly set, allowing unintended network traffic. This vulnerability arises from overly permissive inbound or outbound rules,…