Description

Detects Azure App Services that have platform-level authentication disabled. When authentication is not enabled, the application may be accessible without proper user authentication, potentially exposing sensitive functionality or data to unauthorized users.

Detection Strategy

• Examines the authentication configuration for each Azure App Service instance

• Checks if the platform authentication setting 'enabled' flag is set to false or missing

• Reports a vulnerability when an App Service is found with authentication disabled