Azure Error: MissingApiVersionParameter (securitycenter.py)

[ab-smith]

Describe the bug

Steps:

• downloaded the package using pip (or master branch on git)
• follow the basic steps to start the audit (using account browser since I have MFA)
• Get this error and scout is just stuck:

ERROR securitycenter.py L86: Failed to retrieve compliance results: Azure Error: MissingApiVersionParameter Message: The api-version query parameter (?api-version=) is required for all requests.

To Reproduce

Please provide:

• python3 scout.py azure --user-account-browser --tenant xxx-yyy-zzzz

Additional context

Same behaviour using git version or pip version

[ab-smith]

Sorry if there is a duplicate that I haven't found.

[bartosz-piotrowski-a]

UP: I have same issue.

[stephenc01]

Any quick work around for this?

[nes-jisc]

Same issue here

[lshw54]

Same issue

[mhomrane]

Getting the same issue too.

[duckie37]

I got around this error by downgrading to azure-cli=2.5.1-1~bionic . I did see the error pop up again in some sections and since this is my first time using this tool I am not sure what it typically looks like.

[AbhishekDptr]

Same issue here. I am stuck with this now. Please provide some workaround atleast for the time being

[DjangoDani]

Any news regarding this issue? The report of security center would be really usefull

[billabongrob]

Same issue here. If you add "--skip securitycenter" to your azure commands, this will keep you running in a degraded state; obviously, missing the security center findings from Azure.

[LexStar]

still same issue

[arunksingh16]

I am also facing this issue.

2022-04-21 10:42:40 XXXXXXX scout[5043] INFO Fetching resources for the App Services service 2022-04-21 10:42:41 XXXXXXX scout[5043] ERROR securitycenter.py L86: Failed to retrieve compliance results: Azure Error: MissingApiVersionParameter Message: The api-version query parameter (?api-version=) is required for all requests.

[vollkorn1982]

I am affected as well:

2022-04-26 19:54:23 jan-ThinkPad-T14s scout[42266] ERROR securitycenter.py L86: Failed to retrieve compliance results: Azure Error: MissingApiVersionParameter Message: The api-version query parameter (?api-version=) is required for all requests.

Running on Ubuntu 20.04, fresh git clone from today in a venv with Python 3.8.10

[jurajsucik]

Same issue here

[phillips321]

Same issue here

[bzogala]

Still present in 5.11. Running on Mac with homebrew python and seperate venv dedicated for scout. Besides patch do we have conclusion what is core issue here ? Is the error within azure-cli or scout itself? Shouldn't scout handle the error itself better ?

[stephenc01]

I believe azure their endpoint and requires to send the api version in the request. IMO scout needs to have this requirement incorporated.

Thank You, Stephen C -All of my email addresses go to the same place -Save Paper, think before you print

On Sat, May 21 2022 at 9:30 AM, bzogala < @.*** > wrote:

Still present in 5.11. Running on Mac with homebrew python and seperate venv dedicated for scout. Besides patch do we have conclusion what is core issue here ? Is the error within azure-cli or scout itself? Shouldn't scout handle it better ?

— Reply to this email directly, view it on GitHub ( https://github.com/nccgroup/ScoutSuite/issues/1385#issuecomment-1133643851 ) , or unsubscribe ( https://github.com/notifications/unsubscribe-auth/ABD32Z7L6BQWR7WKG5AVG6TVLDXQNANCNFSM5IWAC7NA ). You are receiving this because you are subscribed to this thread. Message ID: <nccgroup/ScoutSuite/issues/1385/1133643851 @ github. com>

[bzogala]

The above is message coming from console, but doesn't give any specific information on actual implementation, particular version of API and point in code where this should be injected. Also it means something is inconsistent either on scout side or azure library or azure backend. As the error doesn't appear globally, only in security center

[Popzi]

@fernando-gallego looks like the issue will be resolved in the develop branch, but also after the merge of #1425 Graph API will only return 100 results and Microsoft refers to this as Paging: https://docs.microsoft.com/en-us/graph/paging

[michyweb]

@Popzi could you please create an issue for this?

[fernando-gallego]

Workaround implemented in version 5.12.0, following up in https://github.com/nccgroup/ScoutSuite/issues/1428

[tkmru]

I'm getting MissingApiVersionParameter error even with v5.12.0.

scout[15213] ERROR securitycenter.py L86: Failed to retrieve compliance results: Azure Error: MissingApiVersionParameter
Message: The api-version query parameter (?api-version=) is required for all requests.