OCUM 6.4 weak encryption algorithms & CBC ciphers remediation

SMLocke — Wed, 04 Jun 2025 16:09:43 GMT

Hello, comrades!

As part of a vulnerability scan, my OCUM 6.4P1 server tripped on two particular encryption-related vulnerabilities: Weak MAC algorithms enabled (hmac-sha1-96, hmac-sha2-256-96, and hmac-sha2-512-96), and CBC mode ciphers enabled (aes128-cbc, aes192-cbc, and aes256-cbc). Has anyone else encountered this with the OVA version of OCUM 6.4P1, and have been able to remediate it?

Thanks!

Re: OCUM 6.4 weak encryption algorithms & CBC ciphers remediation

niels — Fri, 20 Jan 2017 09:15:18 GMT

Hi SMLocke,

OCUM 6.4P1 has been pulled a while ago and instead the support site recommends to install 6.4P2 which has lots of security fixes.

A list of fixes can be found here:

http://mysupport.netapp.com/NOW/download/software/oncommand_cdot/6.4P2/

regards, Niels

topic Re: OCUM 6.4 weak encryption algorithms & CBC ciphers remediation in Active IQ Unified Manager Discussions

OCUM 6.4 weak encryption algorithms & CBC ciphers remediation

Re: OCUM 6.4 weak encryption algorithms & CBC ciphers remediation