Database threats and vulnerabilities
Database vulnerabilities are as varied as the environments the technologies are deployed in and cover a wide range of areas, from networks to engines to configuration issues that leave them susceptible to attack. One of the most common vulnerabilities is the simplest to correct, and that is simply patching. It is not uncommon for IT departments to not patch their database servers immediately when patches are released. The reason for this is that the complexity of databases and the criticality of the data they hold can make the risk of breaking the database a real problem if the patch doesn’t work. The result is that vulnerabilities can be exposed for long periods of time.
But before vulnerabilities in databases can be uncovered, it is necessary to know where your databases are and what types they are. Databases can be easily missed or remain unknown because they can be installed as a component of an application, not reported by an application...