Use of an insecure channel - SMTP
Description
The configuration of the SMTP service is set to not use SSL, so confidential information traveling by this means that can be viewed without any type of encryption.
Impact
Obtain and modify confidential information sent by SMTP.
Recommendation
Deploy the application over an encrypted communication channel, use SSL secure protocols.
Threat
Unauthorized internal attacker.
Expected Remediation Time
⏱️ 60 minutes.
Requirements
181 - Transmit data using secure protocols