A county open-data project discovers a cloud storage bucket holding draft resident datasets is configured for public read without authentication. Which vulnerability type best describes this finding?
Select an answer to reveal the explanation.
Short Explanation
A cloud bucket left on "anyone can read" is cloud misconfiguration — the data walked out the front door without a break-in exploit. Fix the ACL; this is not a buffer overflow or a TOC/TOU race. Municipal cloud storage needs least-privilege and continuous config review.
Full Explanation
Publicly readable cloud storage is a cloud-specific misconfiguration vulnerability that exposes data without needing traditional host exploits. Objective 2.3 includes cloud and misconfiguration classes. Buffer overflows, vishing, and TOC/TOU races are different categories. Counties should enforce private defaults, encryption, logging, and periodic reviews of object-storage policies.