Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Load Balancer Allowing Clear Text (HTTP) Communication #1488

Open
juanbermudez-higg opened this issue Dec 13, 2022 · 2 comments
Open

Load Balancer Allowing Clear Text (HTTP) Communication #1488

juanbermudez-higg opened this issue Dec 13, 2022 · 2 comments
Labels
bug Something isn't working potential Unconfirmed issue

Comments

@juanbermudez-higg
Copy link

juanbermudez-higg commented Dec 13, 2022 •
edited

The report is noticing a HTTP vulnerability for ALB's, even though the Load Balancer makes HTTP redirection to HTTPS.
There isn't more information in the report more than the Load Balancer's information, listeners, attributes and sgs.

image

Is this a bug?
@juanbermudez-higg juanbermudez-higg added bug Something isn't working potential Unconfirmed issue labels Dec 13, 2022
@x64-latacora
Copy link

#1481 should resolve this

@x64-latacora
Copy link

For ELBv2 at least, unsure how to do it for ELB.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
bug Something isn't working potential Unconfirmed issue
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
2 participants
@x64-latacora @juanbermudez-higg