Details
-
Task
-
Status: Public disclosure
-
Highest
-
Resolution: Done
-
None
-
OJSI-SO
Description
'so-monitoring' application exposes port 30224 with plaintext HTTP.
There are two possible solutions:
1. if the port/api is not used/needed -> close it
2. if it is needed - move communication to HTTPS only
FYI: may be fixed by introduction of Ingress Controller with OOM-1508