H3-2021-0023¶

Public Access to Azure Blob Storage Container

Description¶

An Azure Blob Storage Container that your company may own is publicly accessible to everyone

Impact¶

Attackers may be able to access sensitive data hosted in the container. Depending on container permissions, attackers may be able to delete, upload, and modify existing blobs in the container.

References¶

• Security Recommendations for Blob Storage
• Secure Your Azure Storage Account
• MITRE ATT&CK Technique: T1530: Data from Cloud Storage