Definition
Collaboration platforms allow content to be shared by link, with an external party, or across an entire organization. Exposure arises when the effective audience of that share is wider than the person sharing understood.
Why this is not a misconfiguration in the usual sense
Nothing failed. Every share was created deliberately by someone with permission to create it. The problem is cumulative: individually reasonable decisions, made over years, by people who could not see the aggregate result.
The useful question
Reporting that link-sharing is enabled is not a finding. It is a product feature. The finding is what becomes reachable because of it: which sensitive records, to which audience, and whether that audience still includes people who have left.
- Sharing Configuration
- External Link
- SaaS Resource
- Sensitive Records
Each hop validated by successful exploitation
Tags
- saas posture
- data exposure
- sharing