Security team vulnerability scan is detecting basic authentication on 8481

Products

• CA Performance Management - Usage and Administration
• DX NetOps

Issue/Introduction

The following web pages use Basic Authentication over an unencrypted channel on port 8481

/dm/:/  realm=""realm""

The following web pages use Basic Authentication over an unencrypted channel on port 8281

/em/:/ realm=””realm””

Environment

Release : 21.2, 22.2

Component : DX NetOps Performance Management Vulnerabilities

Cause

The event manager (EM) and device manager (DM) are using http.

Resolution

Broadcom is working to add https to both of these services.

This fix is tentatively targeted for 22.2.8 release.