NESSUS:AMQP Cleartext Authentication

276 views

Skip to first unread message

Rajesh Raju

unread,

Sep 24, 2018, 3:42:05 AM9/24/18

to rabbitmq-users

Hi Team,

Could you please suggest me how to resolve the below issue. Nessus scan report attached.

MEDIUM

AMQP Cleartext Authentication

Description

The remote Advanced Message Queuing Protocol (AMQP) service supports one or more authentication mechanisms that allow credentials to be sent in the clear.

Output

```
No output recorded.
```
Port Hosts
5672 / tcp
10.200.80.74

Port	Hosts
5672 / tcp	10.200.80.74

Nessus_Basic_Scan_0b0orr-CORE-12148.pdf

Michael Klishin

unread,

Sep 24, 2018, 8:02:50 PM9/24/18

to rabbitm...@googlegroups.com

Use TLS [1] or authenticate with x509 certificates [2].

1. https://rabbitmq.com/ssl.html

2. https://github.com/rabbitmq/rabbitmq-auth-mechanism-ssl

--
You received this message because you are subscribed to the Google Groups "rabbitmq-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to rabbitmq-user...@googlegroups.com.
To post to this group, send email to rabbitm...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.