H3-2025-0002¶

Management Console Exposed to the Internet

Description¶

A management console is exposed to the public internet, allowing attackers to enumerate and potentially access administrative functionality of the application.

Impact¶

This can lead to unauthorized access by an external attacker.

References¶

• CWE-284: Improper Access Control
• MITRE ATT&CK Technique: T1133: External Remote Services