Description

Detects Azure Linux virtual machines that allow SSH password authentication instead of requiring SSH key-based authentication. Password authentication for SSH is considered less secure as it's more vulnerable to brute force attacks compared to SSH keys.

Detection Strategy

• Checks each Azure virtual machine's OS profile configuration

• Reports a vulnerability if a Linux VM has 'disable_password_authentication' set to false

• Only applies to standalone VMs (excludes VMs in scale sets)

• Examines the configuration path '/os_profile/linux_configuration/disable_password_authentication'