Description

Detects Azure Redis Cache instances that allow unencrypted connections without SSL/TLS encryption. This configuration poses a security risk as it permits data transmission over non-SSL ports, potentially exposing sensitive information to network eavesdropping and man-in-the-middle attacks.

Detection Strategy

• Checks if an Azure Redis Cache instance has the 'enable_non_ssl_port' setting enabled

• Reports a vulnerability when non-SSL connections are allowed (enable_non_ssl_port is set to true)

• Examines each Redis Cache instance in the subscription for this insecure configuration