Hi all
Our Nessus security vulnerability scanner reports the following vulnerability since installing RabbitMQ as part of the AWX setup:
“AMQP Cleartext Authentication - The remote Advanced Message Queuing Protocol (AMQP) service supports one or more authentication mechanisms that allow credentials to be sent in the clear”
I’m wondering why this would be an issue if AWX and RabbitMQ are only communicating “internally,” on the same machine, but has anyone else encountered this and know what the solution is?
Environment Details:
AWX 4.0.0
Ansible 2.8.0
RabbitMQ 3.7.15
OS RHEL 7.6
Regards
Phil