Network misconfigurations

Security list allows unrestricted ingress access to port 22 (SSH)


Security lists act as virtual firewalls for your compute instances and other kinds of resources. A security list consists of a set of ingress and egress security rules that specify the types of traffic allowed in and out. Security list rules apply to all the VNICs (Virtual Network Interface Cards) in any subnet that the security list is associated with. It was detected that the security list {OciNetworkSecurityList.Name} under {OciNetworkSecurityList.Vcn} VCN (Virtual Cloud Network) allows unrestricted ingress access to port 22 (SSH). To prevent unauthorized access or attacks on compute instances, it is advised to allow SSH access only from authorized CIDR blocks, rather than leaving them open to the internet (