Disable HTTP Options on RabbitMQ

[Dion Debono]

Hi

Our vulnerability scanner is flagging the HTTP OPtions Method Enabled vulnerability on the AMQ server.

AMQ version is 3.11.13.

How can I disable the HTTP OPTIONS?

Thanks

[kjnilsson]

Does the documentation help?

https://www.rabbitmq.com/management.html#other-security-headers

[Dion Debono]

Thanks for your feedback

I will test this out but the documentation specifies the frame options.  I am not sure  if that is the same as HTTP OPTIONS.

[Marcial Rosales]

So far it is not possible to disable this method. Can you share which information is considered as as "vulnerable"? Thru this method RabbitMQ shares various fields. Are all of them vulnerable? Could it be an alternative to exclude some fields not entire OPTIONS method?