Quantcast
Channel: ONTAP Discussions topics
Viewing all articles
Browse latest Browse all 4967

SnapCreator 4.3 how to disable SSL Medium Strength Cipher

$
0
0

Security scan, ran on server where SCagent is running, found this vulnerability:

 

***********************

Synopsis
The remote service supports the use of medium strength SSL ciphers.

Description
The remote host supports the use of SSL ciphers that offer medium strength encryption, which we currently regard as those with key lengths at least 56 bits and less than 112 bits.

Note: This is considerably easier to exploit if the attacker is on the same physical network.

Solution
Reconfigure the affected application if possible to avoid use of medium strength ciphers.

    Plugin Output
    Here is the list of medium strength SSL ciphers supported by the remote server :

      Medium Strength Ciphers (> 64-bit and < 112-bit key)

        TLSv1
          EDH-RSA-DES-CBC3-SHA         Kx=DH          Au=RSA      Enc=3DES-CBC(168)        Mac=SHA1   
          ECDHE-RSA-DES-CBC3-SHA       Kx=ECDH        Au=RSA      Enc=3DES-CBC(168)        Mac=SHA1   
          DES-CBC3-SHA                 Kx=RSA         Au=RSA      Enc=3DES-CBC(168)        Mac=SHA1   
***************

 

Where and how can I disable SSL Medium Strength Cipher? Is it on server where snap creator is running?
  


Viewing all articles
Browse latest Browse all 4967

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>