pen test - java.exe has open ports with weak ciphers. why are ports 22, 23, 992, 20, 21, 989, 990, 25, 587, 69, 80, 110, 143, 389 listening?
Our Nessus scans of our ManageEngine Operations Manager server are showing several ports as listening. The process behind all but one of these is C:\Program Files\ManageEngine\OpManager\jre\bin\java.exe
what is this for and do we need it to be listening on these? at time of scan we have these open
Port 22: Process java, File Path: C:\Program Files\ManageEngine\OpManager\jre\bin\java.exe
Port 69: Process java, File Path: C:\Program Files\ManageEngine\OpManager\jre\bin\java.exe
Port 80: Process java, File Path: C:\Program Files\ManageEngine\OpManager\jre\bin\java.exe
Port 143: Process java, File Path: C:\Program Files\ManageEngine\OpManager\jre\bin\java.exe
Example Nessus detection:
