Database Administration (MOSC)

MOSC Banner

TLS/SSL Vulnerability on Oracle Listener

Hi Experts,

Security scan is showing TLS/SSL vulnerability on listener port that is running and this listener is using a wallet location, could you please refer me to a doc where this vulnerability is remediated.


Vulnerability Description

TLS is capable of using a multitude of ciphers (algorithms) to create the public and private key pairs.


For example if TLSv1.0 uses either the RC4 stream cipher, or a block cipher in CBC mode.


RC4 is known to have biases and the block cipher in CBC mode is vulnerable to the POODLE attack.



TLSv1.0, if configured to use the same cipher suites as SSLv3, includes a means by which a TLS implementation can downgrade the connection to SSL v3.0, thus weakening security.

Howdy, Stranger!

Log In

To view full details, sign in to My Oracle Support Community.

Register

Don't have a My Oracle Support Community account? Click here to get started.

Category Leaderboard

Top contributors this month

New to My Oracle Support Community? Visit our Welcome Center

MOSC Help Center