Instance metadata services may be exposed within virtual machines without appropriate access controls, allowing unauthorized retrieval of sensitive configuration details or temporary credentials.
Compute / Virtual Machines / Threats / DEV
Instance Metadata is Unprotected
CCC.VM.TH02
Related Capabilities
| ID | Title | Description |
|---|---|---|
| CCC.VM.CP16 | Instance Metadata | Providing metadata about virtual machine instances for configuration and management purposes. |
External Mappings
| Framework | ID | Remarks |
|---|---|---|
| MITRE-ATT&CK | T1552.005 |