Improper Access Control
| Property | |
|---|---|
| Language |  |
| Severity |  |
| CWE | CWE-284: Improper Access Control |
| OWASP | A05:2017 - Broken Access Control |
| Confidence Level | Low |
| Impact Level | Low |
| Likelihood Level | Low |
Description#
The app service is not configured with a managed identity, which means it lacks a secure way to authenticate with other Azure services. This can lead to insecure credential management or unauthorized access risks.
Impact#
Without a managed identity, the app may require hardcoded credentials or less secure authentication methods, increasing the risk of credential leaks or unauthorized access to sensitive Azure resources. Attackers could exploit this to gain elevated permissions or access confidential data.