risks / Data discovery

Description

Allows an attacker to inventory stored data objects. May allow an attacker to focus attacks on specific data repositories. When object identifiers contain sensitive information (e.g. tenant identifiers), gives attackers access to this information.

Risk: LOW

This risk may assist in additional attacks, or gain access to confidential data that do not create organizational risk on their own.

Mitigations

1. Avoid using sensitive data identifiers

Links

1. https:/​/​attack.mitre.org/​techniques/​T1619/​

Affected Privileges

An attacker may be able to exploit this risk if they gain any of the following privileges: