Change message and severity of rule (#3061)

* change message to reflect severity level

* update severity

* change message a bit

---------

Co-authored-by: enno <14846866+enncoded@users.noreply.github.com>

java/spring/security/audit/spring-actuator-fully-enabled.yaml

@@ -5,8 +5,8 @@ rules:
     Spring Boot Actuator is fully enabled. This exposes sensitive endpoints such as /actuator/env, /actuator/logfile,
     /actuator/heapdump and others.
     Unless you have Spring Security enabled or another means to protect these endpoints, this functionality
-    is available without authentication, causing a severe security risk.
-  severity: WARNING
+    is available without authentication, causing a significant security risk.
+  severity: ERROR
   languages: [generic]
   paths:
     include: