Description

Identifies Azure MySQL databases that have SSL/TLS encryption disabled for client connections. When SSL is not enforced, database traffic between clients and the server can be transmitted unencrypted, making it vulnerable to man-in-the-middle attacks and data exposure.

Detection Strategy

• Checks the 'require_secure_transport' configuration parameter for each Azure MySQL database

• Reports a vulnerability if this setting is explicitly set to 'OFF'

• Ensures that all database connections require SSL/TLS encryption for secure data transmission