Network misconfigurations

Ec2 instance allows inbound access to TCP port 9300 (Elasticsearch)

Platform(s)
Compliance Frameworks
  • CSA CCM

Description

Ec2 instance ""{AwsEc2Instance}"" is associated with security group ""{AwsEc2Instance.SecurityGroups}"" that is configured to allow inbound access to TCP port 9300 (Elasticsearch) from any IP address (0.0.0.0/0)