TLS/SSL Vulnerability on Oracle Listener
Hi Experts,
Security scan is showing TLS/SSL vulnerability on listener port that is running and this listener is using a wallet location, could you please refer me to a doc where this vulnerability is remediated.
Vulnerability Description
TLS is capable of using a multitude of ciphers (algorithms) to create the public and private key pairs.
For example if TLSv1.0 uses either the RC4 stream cipher, or a block cipher in CBC mode.
RC4 is known to have biases and the block cipher in CBC mode is vulnerable to the POODLE attack.
TLSv1.0, if configured to use the same cipher suites as SSLv3, includes a means by which a TLS implementation can downgrade the connection to SSL v3.0, thus weakening security.