Enterprise Manager Generic (MOSC)

MOSC Banner

Mitigate the SSL v3.0 Vulnerability (aka "Poodle Attack") in OEM 13.5

Hi Experts,


I have recently upgraded OMS to 13.5 and I'm now seeing these securityl vulnerabilities on the OMS host, is there a way to disable or mitigate these vulnerabilities.


Secure Sockets Layer/Transport Layer Security (SSL/TLS) Server supports Transport Layer Security (TLSv1.0)

Host is Vulnerable to Extended Master Secret TLS Extension (TLS triple handshake)

Weak SSL/TLS Key Exchange





Vulnerability Description

TLS is capable of using a multitude of ciphers (algorithms) to create the public and private key pairs.


For example if TLSv1.0 uses either the RC4 stream cipher, or a block cipher in CBC mode.


RC4 is known to have biases and the block cipher in CBC mode is vulnerable to the POODLE attack.

Tagged:

Howdy, Stranger!

Log In

To view full details, sign in to My Oracle Support Community.

Register

Don't have a My Oracle Support Community account? Click here to get started.

Category Leaderboard

Top contributors this month

New to My Oracle Support Community? Visit our Welcome Center

MOSC Help Center