Unsolved

This post is more than 5 years old

1 Message

81744

May 15th, 2009 13:00

Weak Ciphers accepted in Dell Openmange Server Administrator

Does anyone know how I can disable weak SSL ciphers for the OMSA web site?  I can't seem to find anywhere in it's installation directory that specifies that.  I have this issue on both Windows/Linux.  Here's part of the output from my Nessus Scans.  I would like to mitigate this vulnerability if possible.

 

Here is the list of weak SSL ciphers supported by the remote server :

Low Strength Ciphers (< 56-bit key)
SSLv2
EXP-RC2-CBC-MD5 Kx=RSA(512) Au=RSA Enc=RC2(40) Mac=MD5 export
EXP-RC4-MD5 Kx=RSA(512) Au=RSA Enc=RC4(40) Mac=MD5 export
SSLv3
EXP-RC2-CBC-MD5 Kx=RSA(512) Au=RSA Enc=RC2(40) Mac=MD5 export
EXP-RC4-MD5 Kx=RSA(512) Au=RSA Enc=RC4(40) Mac=MD5 export

The fields above are :

{OpenSSL ciphername}
Kx={key exchange}
Au={authentication}
Enc={symmetric encryption method}
Mac={message authentication code}
{export flag}

8 Posts

November 23rd, 2009 12:00

Same situation here.  It's disappointing to see Dell hasn't stepped up and taken ownership of this issue.

2 Posts

August 13th, 2010 08:00

2 Posts

August 13th, 2010 08:00

February 3rd, 2011 13:00

You're answer is posted here. http://en.community.dell.com/support-forums/servers/f/177/t/18523153.aspx


Is the link expired? Something error occurs when opening the link.
No Events found!

Top