Skip to content

Restrict Access to Configuration Endpoints

Info

ID: MS-M7033
MITRE mitigation: -

Disable or secure application configuration endpoints that expose environment variables, settings, or other sensitive configuration data. Restricting access prevents attackers from discovering credentials stored in configuration.

Techniques Addressed by Mitigation

ID Name Use
MS-TA7019 Cloud credentials in runtime environment Disable or secure application configuration endpoints that expose environment variables or settings.