Azure_AppService_9

Ensure that ' Java version ' is the latest, if used to run the web app

Description

Periodically, newer versions are released for Java software either due to security flaws or to include additional functionality. Using the latest Java version for web apps is recommended in order to take advantage of security fixes, if any, and/or new functionalities of the newer version.

Remediation

Perform the following in the Azure Console:

  1. Login to Azure Portal using https://portal.azure.com
  2. Go to App Services
  3. Click on each App
  4. Under Setting section, Click on Application settings
  5. Under General settings , Set Java version to latest version available
  6. Set Java minor version to latest version available
  7. Set Java web container to the latest version of web container available

Perform the following in Azure Command Line Interface 2.0:

To see the list of supported runtimes.

az webapp list-runtimes | grep java

To set latest Java version for an existing app, run the following command.

az webapp config set –resource-group <RESOURCE_GROUP_NAME> –name <APP_NAME> –java-version ‘ 1.8 ‘ –java-container ‘ Tomcat ‘ –java-container-version ‘ & lt;VERSION & gt;’

References:

  1. https://docs.microsoft.com/en-us/azure/app-service/web-sites-configure#general-settings

Service

AppService

Severity

Medium

Compliance

Mapping

We are now live on AWS Marketplace.
The integrated view of your cloud infrastructure is now easier than ever!