Spotlight Diagnostic Server.exe on port 443 SSL Server Allows Anonymous Authentication Vulnerability (4263835)

Security vulnerability detected for SpotlightDiagnosticServer.exe on port 443. The vulnerability message is "SSL Server Allows Anonymous Authentication Vulnerability"

RESOLUTION

1.) Find the file in the Diagnostic Server install folder named webservice.xml.
     It should be in Diagnostic Server\Agent\conf\Service

2.) Open the file in a text editor and find the following line
<property name="enabled" dataType="STRING" displayName="enabled" description="enabled" encryptStyle="NONE" hidden="false">true</property>

3.) Change the true to false
<property name="enabled" dataType="STRING" displayName="enabled" description="enabled" encryptStyle="NONE" hidden="false">false</property>

4.) Save the file.

5.) Restart the Spotlight Diagnostic Server services using the Services control panel.