783
Example Language: Shell (Good)
az storage account update -g {ResourceGroupName} -n {StorageAccountName} --https-only true
The change can be confirmed from the result by verifying that the enableHttpsTrafficOnly value is
true:
Example Language: JSON (Good)
{
"name": "{StorageAccountName}",
"enableHttpsTrafficOnly": true,
"type": "Microsoft.Storage/storageAccounts"
}
Note: to enable secure transfer using Azure's Portal instead of the command line:
1. Open the Create storage account pane in the Azure portal.
2. In the Advanced page, select the Enable secure transfer checkbox.
Observed Examples
Reference Description
CVE-2022-29519 Programmable Logic Controller (PLC) sends sensitive information in plaintext,
including passwords and session tokens.
https://www.cve.org/CVERecord?id=CVE-2022-29519
CVE-2022-30312 Building Controller uses a protocol that transmits authentication credentials in
plaintext.
https://www.cve.org/CVERecord?id=CVE-2022-30312
CVE-2022-31204 Programmable Logic Controller (PLC) sends password in plaintext.
https://www.cve.org/CVERecord?id=CVE-2022-31204
CVE-2002-1949 Passwords transmitted in cleartext.
https://www.cve.org/CVERecord?id=CVE-2002-1949
CVE-2008-4122 Chain: Use of HTTPS cookie without "secure" flag causes it to be transmitted
across unencrypted HTTP.
https://www.cve.org/CVERecord?id=CVE-2008-4122
CVE-2008-3289 Product sends password hash in cleartext in violation of intended policy.
https://www.cve.org/CVERecord?id=CVE-2008-3289
CVE-2008-4390 Remote management feature sends sensitive information including passwords
in cleartext.
https://www.cve.org/CVERecord?id=CVE-2008-4390
CVE-2007-5626 Backup routine sends password in cleartext in email.
https://www.cve.org/CVERecord?id=CVE-2007-5626
CVE-2004-1852 Product transmits Blowfish encryption key in cleartext.
https://www.cve.org/CVERecord?id=CVE-2004-1852
CVE-2008-0374 Printer sends configuration information, including administrative password, in
cleartext.
https://www.cve.org/CVERecord?id=CVE-2008-0374
CVE-2007-4961 Chain: cleartext transmission of the MD5 hash of password enables attacks
against a server that is susceptible to replay (CWE-294).
https://www.cve.org/CVERecord?id=CVE-2007-4961
CVE-2007-4786 Product sends passwords in cleartext to a log server.
https://www.cve.org/CVERecord?id=CVE-2007-4786
CVE-2005-3140 Product sends file with cleartext passwords in e-mail message intended for
diagnostic purposes.
https://www.cve.org/CVERecord?id=CVE-2005-3140
MemberOf Relationships
CWE Version 4.14
CWE-319: Cleartext Transmission of Sensitive Information
CWE-319: Cleartext Transmission of Sensitive Information