Network misconfigurations

AWS EC2 instance allows public ingress access on Oracle port 1521

Risk Level

Hazardous (3)

Platform(s)
Compliance Frameworks

Description

Oracle TNS(Transparent Network Substrate) port - 1521 is used by Oracle client to connect to the database server over Oracle SQL Net protocol. Allowing inbound traffic from all external IP addresses on TNS port will let commands to be sent to the listener, the listener can be shut down, or the databases can be queried. It is a best practice to block public access, and restrict access from specific IP addresses to port 1521.

  • Recommended Mitigation

    It is recommended to replace the source IP of the rule with a specific IP address or delete the rule.

Need help?

Get a free Security Risk Assessment. Start today

Orca Security Demo Demo the Orca Platform-> In just 10 minutes, you’ll see how Orca Security can revolutionize your cloud security strategy. Watch a recorded demo from a cloud security expert now.