Azure_AppService_6

Ensure that '.Net Framework ' version is the latest, if used as a part of the web app

Description

Periodically, newer versions are released for .Net Framework software either due to security flaws or to include additional functionality. Using the latest .Net framework version for web apps is recommended in order to to take advantage of security fixes, if any, and/or new functionalities of the latest version.

Remediation

Perform the following in the Azure Console:

  1. Login to Azure Portal using https://portal.azure.com
  2. Go to App Services
  3. Click on each App
  4. Under Setting section, Click on Application settings
  5. Set .NET Framework version to latest version available under General settings

Perform the following in Azure Command Line Interface 2.0:

To see the list of supported runtimes.

az webapp list-runtimes | grep aspnet

To set latest .NET Framework version for an existing app, run the following command.

az webapp config set –resource-group <RESOURCE_GROUP_NAME> –name <APP_NAME> –net-framework-version <VERSION>

References:

  1. https://docs.microsoft.com/en-us/azure/app-service/web-sites-configure#general-settings

Service

AppService

Severity

Medium

Compliance

Mapping

We are now live on AWS Marketplace.
The integrated view of your cloud infrastructure is now easier than ever!