Cloud Weaknesses 31 articles

Overview Misconfigured Kubernetes in cloud environments refers to improper setup or management of Kubernetes clusters, leading to security vulnerabilities. These misconfigurations can occur due to default settings, inadequate access controls,…

Overview Orphaned cloud resources are assets within a cloud environment that remain active but are no longer associated with any active user, project, or application. These resources often arise due…

Overview Over-permissive Cloud Identity and Access Management (IAM) roles occur when cloud users or services are granted broader permissions than necessary for their functions. This vulnerability arises from misconfigured access…

Overview Poor cloud incident visibility refers to the insufficient ability to detect, monitor, and analyze security incidents within cloud environments. This weakness arises from inadequate logging, lack of centralized monitoring,…

Overview Poor cloud key and secret management refers to inadequate practices in handling cryptographic keys, API keys, passwords, and other sensitive credentials used to access cloud services. This weakness arises…

Overview Publicly exposed cloud storage buckets occur when cloud-based storage containers are configured to allow open access to anyone on the internet. This vulnerability arises from misconfigurations or overly permissive…

Overview Shadow cloud accounts refer to unauthorized or unmanaged cloud service accounts created or used within an organization without formal approval or oversight. These accounts often arise when employees independently…

Overview The Shared Responsibility Model Gaps refer to security vulnerabilities that arise from unclear or misunderstood divisions of security duties between cloud service providers and their customers. These gaps occur…

Overview Unrestricted cloud network access refers to the lack of proper controls limiting inbound or outbound traffic within cloud environments. This vulnerability arises when cloud resources are exposed without adequate…

Overview Unvalidated Infrastructure-as-Code (IaC) deployments occur when automated infrastructure provisioning scripts or templates are executed without proper verification or testing. This vulnerability arises from the lack of validation processes that…

Overview Weak cloud tenant isolation refers to insufficient separation between different customers' environments within a shared cloud infrastructure. This vulnerability arises when cloud service providers fail to adequately segregate resources,…