RSM web dashboard shows job status without login prompt
0 reputation · 18 Oct 2023, 18:38 UTC
Goal: determine if the ANSYS Remote Solve Manager (RSM) web dashboard is reachable without authentication from hosts outside the intended trusted subnet.
Constraints: by default the RSM service binds to 0.0.0.0 on TCP port 8080 and does not enforce any authentication mechanism unless the administrator activates basic auth or integrates with Windows Active Directory. Consequently, any modification to the bind address or authentication settings requires a restart of the RSM service and may necessitate updating firewall rules, leaving the actual exposure state uncertain after installation or reconfiguration.
Questions: Is the RSM listener currently bound to all network interfaces? How can administrators verify whether the dashboard is accessible from an external network without altering the service configuration? What indicators suggest that the web interface is unintentionally exposed to public access?