Description

Detects Application Load Balancers (ALBs) that have HTTP listeners which aren't properly redirecting traffic to HTTPS. This represents a security risk since unencrypted HTTP traffic could be intercepted, potentially exposing sensitive data in transit.

Detection Strategy

• Identifies Application Load Balancers with HTTP listeners (port 80)

• Reports a vulnerability if an HTTP listener has no redirection configuration set up

• Reports a vulnerability if an HTTP listener redirects to another HTTP endpoint instead of HTTPS

• Only evaluates Application Load Balancer type (ignores Network and Gateway load balancers)