Instance metadata services may be exposed within virtual machines without appropriate access controls, allowing unauthorized retrieval of sensitive configuration details or temporary credentials.
Instance Metadata is Unprotected
CCC.VM.TH02
Related Capabilities
| ID | Title | Description |
|---|---|---|
| CCC.VM.CP16 | Instance Metadata | Providing metadata about virtual machine instances for configuration and management purposes. |
External Mappings
| Framework | ID | Relationship | Remarks |
|---|---|---|---|
| MITRE-ATT&CK | T1552.005 | relates-to |