Weakness (CWE)
CWE-1327: Binding to an Unrestricted IP Address
The product assigns the address 0.0.0.0 for a database server, a cloud service/instance, or any computing resource that communicates remotely.
How to prevent it (2 mitigations)
-
System Configuration
Assign IP addresses that are not 0.0.0.0.
-
System Configuration
Unwanted connections to the configured server may be denied through a firewall or other packet filtering measures.
Source: MITRE CWE-1327
5 results · Clear filters · Feed
-
Low 2.1
GitHub CLI: `gh codespace ports forward` exposes forwarded services on all network interfaces by default
GitHub CLI (gh) is GitHub's official command line tool. Versions 2.28.0 through 2.97.0 bind the local listener created by gh codespace ports forward to all available network interfaces by default. While port forwarding is active, a service in a Codespace can …
-
Low 3.5
Excessive attack surface in acep-collector service due to binding to an unrestricted IP address. The following products…
-
Low 3.5
Excessive attack surface in acep-importer service due to binding to an unrestricted IP address. The following products …
-
Low 3.5
Excessive attack surface in archive-server service due to binding to an unrestricted IP address. The following products…
-
Low 3.0
In JetBrains PyCharm before 2022.1 exposure of the debugger port to the internal network was possible