DCO v8.0.2 "SSH Weak Algorithms Supported"

[Tafadzwa]

A vulnerability Scan has picked up the following Vulnerabilities with my DCO Server v8.0.2 :

1. SSH Server CBC Mode Ciphers Enabled
2. SSH Weak MAC Algorithms Enabled
3. SSH Weak Algorithms Supported

I intend to upgrade the Server to DCO v8.3.2 to address certain vulnerabilities however I wish to know if there are certain configurations I need to perfom to address the above mentioned Vulnerabilities or the latest version of DCO has these issues already addressed?

[gsterling · Accepted solution]

Hello.

Upgrading your DCO installation should address the security issues you have noted in your post. DCO 8.0.2 is quite old and has received a number of security improvements since that timeframe.

Ciphers are updated and the more recent releases can be configured to accept only TLSv1.2 connections.

Regards

Greg Sterling