Azure App Service Web app does not use latest Java version misconfiguration detected in code

Rule Details

Cortex AppSec Rule ID	APPSEC_AZURE_83
Category - Subcategory	Compute - Unsanctioned Resource Or Type
Provider	AZURE
Severity	LOW
Framework	ARM, Bicep, Terraform, Terraform Plan

Impact

Azure App Service web applications developed with the Java software stack should use the latest available version of Java to ensure the latest security fixes are in use.

How to Fix

Resource: azurerm_app_service

• Arguments: java_version - (Optional) The version of Java to use.

If specified java_container and java_container_version must also be specified. Possible values are 1.7, 1.8 and 11 and their specific versions - except for Java 11 (e.g. 1.7.0_80, 1.8.0_181, 11) [source,go]

resource "azurerm_app_service" "example" { ... site_config {

• java_version = "11" }

} ", }