⚠️
Misconfiguration
Security
Security control failure due to incorrect configuration.
Definition
Misconfiguration is an operational control failure where systems, permissions, networks, or storage are configured incorrectly, leading to unintended exposure or privilege.
In plain English
Security control failure due to incorrect configuration.
Why this matters
Why it matters: It is a common root cause of breaches and leaks, especially in cloud environments.
Example
Example: Public object storage ACLs exposing PII and documents.