DCE 7.2.6 weak point detect by security scan

[DCIM_Support]

Hi ,

Our customer used the security scan our DCE server and detect weak point :

TLS/SSL RC4 issue  , does our newest version can solve this issue ? 

Best Regards

(CID:100340714)

[DCIM_Support]

Hi Chu,

If there is a specific vulnerability, can you please specify? For instance, 7.2.7 resolved CVE-2015-0235. Also, please specify what you are using for the scan. Providing the scan output would be helpful as well. I have found nothing specific to TLS/SSL RC4 but that does not mean it has or has not been addressed. I will look into that on my side.

Steve

(CID:100340830)

[DCIM_Support]

Hi Steven , They used McAfee mvm to scan our DCE server , The message like as below: The encryption kit of TLS/SSL RC4 expose the vulnerability ,it's should be disable . Hope this can useful , thank u . Best Regards

(CID:101027907)

[DCIM_Support]

Hi Steve , Any update about this ? Customer said that our encryption kit of TLS/SSL RC4 expose the vulnerability , They hope can disable RC4 encryption kit of TLS/SSL server . Does our new version of DCE can fix this issue ? Best Regards

(CID:102924906)

[DCIM_Support]

Hi Chu, Sorry but I'm still awaiting a resolution. From what I've seen, they have scanned and come up with the same results. There is no new version in the immediate future that will resolve this to my knowledge but I have asked (just in seeing your note) if this can be done manually. If it can, this would require an APC person either remotely accessing the server or going on-site to potentially edit some back end files. I am not 100% sure this is an option but I am awaiting a response. Steve

(CID:102924964)

[DCIM_Support]

Hi Steve , Any update about this issue ? I'm from Schneider Taiwan PEC team , If it can be done manually , I can go no site to solve this issue but need your help to send me like fix patch ... , thanks . Best Regards

(CID:104174375)

[DCIM_Support]

This question is closed for comments. You're welcome to start a new topic if you have further comments on this issue.