OCI Security List allows all traffic on SSH port (22) misconfiguration detected in code

Rule Details

Cortex AppSec Rule ID	APPSEC_OCI_19
Category - Subcategory	Public Exposure - Sensitive Ports
Provider	ORACLE
Severity	LOW
Framework	Terraform

Impact

Security list are stateful and provide filtering of ingress/egress network traffic to OCI resources. We recommend that security groups do not allow unrestricted ingress access to port 22. Removing unfettered connectivity to remote console services, such as SSH, reduces a server's exposure to risk.

How to Fix

[source,go]

resource "oci_core_security_list" "pass0" { ...

ingress_security_rules { ... source = "0.0.0.0/0"

tcp_options { max = 25

• min = 25
• min = 22 ... } } }

---