SSL Medium Strength Cipher Suites Supported (SWEET32)-CVE-2016-2183

[Nabil_Rashid]

Hi,

Does anyone aware of the Vulnerability CVE-2016-2183 SSL Medium Strength Cipher Suites Supported (SWEET32).

I got this solution from vulnerability team , but don't know how to apply fix for the same.


Medium Strength Ciphers (> 64-bit and < 112-bit key, or 3DES)


Name Code KEX Auth Encryption MAC
---------------------- ---------- --- ---- --------------------- ---
DES-CBC3-SHA 0x00, 0x0A RSA RSA 3DES-CBC(168) SHA1


The fields above are :


{Tenable ciphername}
{Cipher ID code}
Kex={key exchange}
Auth={authentication}
Encrypt={symmetr

Continue reading...