Azure_AppService_7

Ensure that ' PHP version ' is the latest, if used to run the web app

Description

Periodically newer versions are released for PHP software either due to security flaws or to include additional functionality. Using the latest PHP version for web apps is recommended in order to take advantage of security fixes, if any, and/or additional functionalities of the newer version.

Remediation

Perform the following in the Azure Console:

  1. Login to Azure Portal using https://portal.azure.com
  2. Go to App Services
  3. Click on each App
  4. Under Setting section, Click on Application settings
  5. Set PHP version to latest version available under General settings

Perform the following in Azure Command Line Interface 2.0:

To see the list of supported runtimes.

az webapp list-runtimes | grep php

To set latest PHP version for an existing app, run the following command.

az webapp config set –resource-group <RESOURCE_GROUP_NAME> –name <APP_NAME> –php-version <VERSION>

References:

  1. https://docs.microsoft.com/en-us/azure/app-service/web-sites-configure#general-settings

Service

AppService

Severity

Medium

Compliance

Mapping

We are now live on AWS Marketplace.
The integrated view of your cloud infrastructure is now easier than ever!