Description

Detects Azure Redis Cache instances configured with insecure TLS protocol versions below 1.2. Using outdated TLS versions (1.0 or 1.1) exposes the Redis cache to known cryptographic vulnerabilities that could compromise encrypted communications between clients and the cache server.

Detection Strategy

• Examines the 'minimum_tls_version' configuration setting for each Azure Redis Cache instance

• Reports a vulnerability if the minimum TLS version is set to anything lower than version 1.2

• Security best practice requires TLS 1.2 or higher to ensure secure encrypted communications