LOW
Source
CloudSploit
ID
php-version

PHP Version

Ensures the latest version of PHP is installed for all App Services

Installing the latest version of PHP will reduce the security risk of missing security patches.

Follow the appropriate remediation steps below to resolve the issue.

  1. Log in to the Microsoft Azure Management Console.

  2. Find the search bar at the top and search for App Services. Step

  3. Select the “App Service” by clicking on “Name” to go to its configuration.Step

  4. Scroll down the selected “App Services” left navigation panel and in “Settings” click on the “Configuration” option.Step

  5. On the “Configuration” page select the General settings tab, scroll down and on the “Stack settings” check the “Major Version” of PHP. It’s recommended to use only latest version of the environment stack.Step

  6. If the “App Service” is not using the latest version of PHP then select the latest version from the “Major version” dropdown.Step

  7. Click on the “Save” button at the top to make the changes.Step

  8. Click “Continue” in the confirmation pop up to save the changes.Step

  9. Repeat steps number 3 - 7 to verify all other “Apps” are using latest Stack version in the account.