Vulnerability scan of SEDR Appliance shows AMQP ports 5672 or 5671 open to cleartext communications

Products

• Endpoint Detection and Response

Issue/Introduction

When running a vulnerability scan of your network, you may get a report that SEDR Appliances allow cleartext communication on ports 5672 and 5671. This is pointed out as a vulnerability AMQP Cleartext Authentication (87733).

Resolution

These ports will be removed in a future release, currently planned for 4.10 version.