OCI security lists allows unrestricted ingress access to port 3389 misconfiguration detected in code

Rule Details

Cortex AppSec Rule ID	APPSEC_OCI_20
Category - Subcategory	Public Exposure - Sensitive Ports
Provider	ORACLE
Severity	LOW
Framework	Terraform

Impact

This rule identifies Security list that allow inbound traffic on RDP port (3389) from the public internet. As a best practice, restrict security groups to only allow permitted traffic and limit brute force attacks on your network.

How to Fix

[source,go]

resource "oci_core_security_list" "pass0" { ... ingress_security_rules { ... source = "0.0.0.0/0"

tcp_options { max = 4000

• min = 3390
• min = 3389 ... } } }

---