Improper Authentication
| Property | |
|---|---|
| Language |  |
| Severity |  |
| CWE | CWE-287: Improper Authentication |
| OWASP | A02:2017 - Broken Authentication |
| Confidence Level | Medium |
| Impact Level | Medium |
| Likelihood Level | Medium |
Description#
The application’s Azure App Service is deployed without authentication enabled in the ‘auth_settings’ block. This means users can access the app without verifying their identity, leaving it open to unauthorized access.
Impact#
Without authentication, anyone can interact with your application, potentially exposing sensitive data or critical functions to attackers. This could lead to data breaches, unauthorized changes, or abuse of your cloud resources, putting your organization at significant risk.