Insufficient Logging
| Property | |
|---|---|
| Language |  |
| Severity |  |
| CWE | CWE-778: Insufficient Logging |
| OWASP | A10:2017 - Insufficient Logging & Monitoring |
| Confidence Level | Medium |
| Impact Level | Low |
| Likelihood Level | Low |
Description#
The Azure App Service resource is not configured to enable detailed error messages in its logging settings. This means important error details may not be captured, making troubleshooting and security monitoring more difficult.
Impact#
Without detailed error messages, it can be harder to detect and investigate issues or attacks, potentially allowing malicious activity to go unnoticed and delaying response to incidents. This can increase operational risk and hinder compliance efforts.