| Property | Value |
|---|---|
| name | demo-vuln-nsg |
| subscription | Pay-As-You-Go |
| resource_group | titan-audit-evidence |
| location | eastus |
| rules | [{'name': 'AllowSSH-Internet', 'direction': 'Inbound', 'access': 'Allow', 'protocol': 'Tcp', 'source': '*', 'source_port': '*', 'destination': '*', 'dest_port': '22', 'priority': 100}, {'name': 'Allow |
| nsg | demo-vuln-nsg |
| rule | AllowSSH-Internet |
| port | 22 |
| source | ANY/Internet |
| subscription | Pay-As-You-Go |
| nsg | demo-vuln-nsg |
| rule | AllowRDP-Internet |
| port | 3389 |
| source | ANY/Internet |
| subscription | Pay-As-You-Go |
| nsg | demo-vuln-nsg |
| rule | AllowSQL-Internet |
| port | 1433 |
| source | ANY/Internet |
| subscription | Pay-As-You-Go |
| Rule | Dir | Access | Source | Port | Priority | Status |
|---|---|---|---|---|---|---|
| AllowSSH-Internet | Inbound | Allow | * | 22 | 100 | ⚠ VIOLATION — SSH OPEN TO INTERNET |
|
🔴
➡ SECURITY VIOLATION DETECTED
Port 22 (SSH) is exposed to the entire internet (*). This violates PCI-DSS Requirement 1 and HIPAA §164.312(e)(1). Immediate remediation required — restrict source IP range to known addresses only.
| ||||||
| AllowRDP-Internet | Inbound | Allow | * | 3389 | 110 | ⚠ VIOLATION — RDP OPEN TO INTERNET |
|
🔴
➡ SECURITY VIOLATION DETECTED
Port 3389 (RDP) is exposed to the entire internet (*). This violates PCI-DSS Requirement 1 and HIPAA §164.312(e)(1). Immediate remediation required — restrict source IP range to known addresses only.
| ||||||
| AllowSQL-Internet | Inbound | Allow | 0.0.0.0/0 | 1433 | 120 | ⚠ VIOLATION — SQL OPEN TO INTERNET |
|
🔴
➡ SECURITY VIOLATION DETECTED
Port 1433 (SQL Server) is exposed to the entire internet (0.0.0.0/0). This violates PCI-DSS Requirement 1 and HIPAA §164.312(e)(1). Immediate remediation required — restrict source IP range to known addresses only.
| ||||||