UNSOLVED

ahmad_alayan

updated

10 years ago

0

1268

November 1st, 2016 07:00

VNX Security

The below listed vulnerabilities were reported on our VNX by our security team the VNX running 5.32.000.5.216;
- SSL/TLS Protocol Triple-DES Information Disclosure Vulnerability
- HTTP Server Prone To Slow Denial Of Service Attack

please advise how i can avoid this security issue 

  • brettesinclair

    2 Intern

    •

    715 Posts

    984

    1

    Posted November 2nd, 2016 01:00

    Tell your security team to name the vulnerabilities they are loosely advising you of, including CVE numbers.

    You can then try and match them up to ESA notices or take actions to workaround.

  • Rainer_EMC

    6 Operator

    •

    8645 Posts

    984

    1

    Posted November 2nd, 2016 03:00

    You can also seach for CVE numbers in the knowledge at support.emc.com

    Looking at the release notes for the latest code can also be helpful

  • brettesinclair

    2 Intern

    •

    715 Posts

    984

    0

    Posted November 9th, 2016 05:00

    Lots of security updates recently released for VNX1, see the ESA ;

    https://support.emc.com/kb/491724

  • Rainer_EMC

    6 Operator

    •

    8645 Posts

    984

    0

    Posted November 9th, 2016 06:00

    yes service pack 8.1.80.7 for VNX1 was just released