Misconfiguration slándála — socrúchán neamhthógtha, réamhshocrúcháin nó cumraíochta — is ceann de na laigí slándála is coitianta (riosca OWASP Top 10). Áirítear ann réamhshocrúcháin nochtaithe, gné nach bhfuil riachtanach, earráidí fhocail, agus crua-dhíonadh ar iarraidh. Éilíonn a sheachaint cumraíochta dhílse agus dhírithe.
Misconfiguraciones coitianta
✗ INSECURE DEFAULTS left unchanged → default passwords, default accounts, sample content
✗ Unnecessary FEATURES/services/ports enabled → larger attack surface
✗ VERBOSE ERRORS in production → stack traces leaking internal details to attackers
✗ Missing SECURITY HEADERS; misconfigured CORS (allow-all); directory listing enabled
✗ Exposed admin/management interfaces or debug endpoints publicly
✗ Cloud misconfigs → public storage buckets, open databases, over-permissive access
✗ Outdated software / unpatched systems; overly permissive file/access permissions
