CASE STUDY 001
MySQL Access Control Exposure
An authorized network security assessment identified externally reachable MySQL service exposure and an overly broad firewall access control rule.
Assessment type: Authorized Network VAPT
Primary area: Network access control
Service assessed: MySQL
Assessment period: May 2026
FINDING
Broad network access to a database service
The assessment identified a MySQL service exposed through TCP port 3306 with a firewall access control rule allowing traffic from 0.0.0.0/0. This represented an unnecessarily broad network exposure for a database service.