HIGH
Source
CloudSploit
ID
open-ldap

Open LDAP

Determines if TCP or UDP port 389 for LDAP is open to the public

Allowing Inbound traffic from external IPv4 addresses to LDAP ports can lead to attacks like DoS, Brute Force, Smurf, and reconnaissance. It is a best practice to restrict the Inbound traffic from specific addresses.

Restrict TCP and UDP port 389 to known IP addresses.