No SSL connection on SQL database might lead to data exposure
Severity | Exploitability | Providers | Categories |
---|---|---|---|
HIGH | HIGH | Google Cloud Provider | DATA, NETWORK |
Description
SSL connection is not configured on SQL database. SSL is responsible for communication encryption. Data might leak in clear.
Impact
Potential data exposure | Visible in logs | User interaction required | Privileges required |
---|---|---|---|
True | False | False | False |
An attacker with interception capabilities would have access to plaintext communications, leading to data exposure.
Remediation guidelines
Ensure SSL is configured on all database instances across your infrastructure.