AMQP Cleartext Authentication

Description

The remote Advanced Message Queuing Protocol (AMQP) service supports one or more authentication mechanisms that allow credentials to be sent in the clear.

Solution

Disable cleartext authentication mechanisms in the AMQP configuration in ubuntu or centos machines

disable unencrypted access in the configuration file. >> unencrypted" here refers to client connections.

https://www.rabbitmq.com/ssl.html

Steps of disabling the AMQP: 

https://liquidwarelabs.zendesk.com/hc/en-us/articles/360019562832-Disable-cleartext-authentication-option-in-RabbitMQ

The above link used for windows vulnerability. Please help in getting resolution for Centos or Ubuntu configuration file.