A security misconfiguration is an incorrect, incomplete or default security setting in a system, application or cloud service that leaves it exposed without any software flaw being exploited. Common examples include a publicly accessible storage bucket, unchanged factory passwords and administration ports open to the internet. Security misconfiguration is one of the risk categories in the OWASP Top 10.
Go deeper on the TecnetBlog: Complete Guide to System Hardening
misconfiguration, cloud misconfiguration, default credentials, insecure configuration, configuration drift