Question 104604 in Azure Question posted in
The official documentation to get you started can be found here.

How to know the OpenSSL version for WebApp hosted in Azure cloud

I know it is not related to coding but really need to know this. Already googled it but no concrete answer was found.

The client wants to know whether our application is vulnerable to the latest vulnerability which is found in OpenSSL.
CVE-2022-3786
CVE-2022-3602

Reference: https://snyk.io/blog/new-openssl-critical-vulnerability/

Tags:

2

Answers


  1. 0

    You can find vulnerable machines with Defender for Cloud’s inventory tools:

    1. Sign in to the Azure portal.
    2. Navigate to Microsoft Defender for Cloud > Inventory
    3. Use the built-in filters to find your at-risk machines:

    According to Tenable:

    OpenSSL version 3.0.7 has been released to address these vulnerabilities.

    You won’t say what kind of WebApp you have but updating OpenSSL in your WebApp will be enough.

    UPDATE

    You can get your OpenSSL Version with the command openssl version

    You can find the app service console in your Azure portal

    enter image description here

    Login or Signup to reply.
  2. 0

    MSFT announced Defender CSPM at Ignite, one of the features of DCSPM is Cloud Security Explorer and it has a built in template for this exact scenario. The feature is in preview and can be used for free (for now)

    OpenSSL Detection

    Login or Signup to reply.
Please signup or login to give your own answer.

Back To Top
Search