/alerttags/cwe-1230/ Recent content in CWE-1230 on ZAP Hugo en-us /docs/alerts/90034/ Mon, 01 Jan 0001 00:00:00 +0000 /docs/alerts/90034/ <p>The Cloud Metadata Attack attempts to abuse a misconfigured NGINX server in order to access the instance metadata maintained by cloud service providers such as AWS, GCP and Azure. All of these providers provide metadata via an internal unroutable IP address &lsquo;169.254.169.254&rsquo; - this can be exposed by incorrectly configured NGINX servers and accessed by using this IP address in the Host header field.</p>