Mitigate the SSL v3.0 Vulnerability (aka "Poodle Attack") in OEM 13.5
Hi Experts,
I have recently upgraded OMS to 13.5 and I'm now seeing these securityl vulnerabilities on the OMS host, is there a way to disable or mitigate these vulnerabilities.
Secure Sockets Layer/Transport Layer Security (SSL/TLS) Server supports Transport Layer Security (TLSv1.0)
Host is Vulnerable to Extended Master Secret TLS Extension (TLS triple handshake)
Weak SSL/TLS Key Exchange
Vulnerability Description
TLS is capable of using a multitude of ciphers (algorithms) to create the public and private key pairs.
For example if TLSv1.0 uses either the RC4 stream cipher, or a block cipher in CBC mode.
RC4 is known to have biases and the block cipher in CBC mode is vulnerable to the POODLE attack.