Strict transport security not enforced and Cacheable SSL Page Found

Products

• VMware vCenter Server

Issue/Introduction

• Security scan report gives the below.
  • Strict transport security not enforced
    xx.xx.x.xxx:8084 (tcp)

Environment

VMware vCenter Version 7.x

Resolution

Port 8084 is used for SOAP communications and is not serving any HTTP requests.  

So there are no HTTP or HTTPS requests being handled on this port and thus, the vulnerabilities reported should not be any cause for concern. 

Additional Information

https://knowledge.broadcom.com/external/article/313919/tcp-and-udp-ports-required-to-accessvmwa.html