Network misconfigurations

Azure Network Security Group allows unrestricted access to mSQL service from the Internet

Platform(s)

Description

mSQL or Mini SQL is a lightweight database management system. There is a rule configured in {AzureNetworkSecurityGroup} network security group, that allows all incoming traffic to this port from the Internet. In order to keep security best practices and decrease the risk for malicious activities, you should restrict access to be only from allowed IP addresses.