The Azure Blob Storage container used for Gardyn device logs is publicly listable without authentication. A malicious user would be able to access any device log file available in the blob storage container.
Credits
Michael Groberman reported this vulnerability to CISA.
