Description

Detects Azure Redis Cache instances configured to allow unauthenticated access. When 'authnotrequired' is enabled, the Redis cache can be accessed without authentication, potentially exposing sensitive data to unauthorized users and increasing the risk of data breaches.

Detection Strategy

• Scans all Azure Redis Cache instances in the subscription

• Checks if the 'authnotrequired' configuration parameter is set to any value other than 'Disabled'

• Reports a vulnerability if authentication is not required for Redis cache access