Vulnerability CVE-2016-8635

Products

• DX Application Performance Management

Issue/Introduction

Vulnerability found at Broadcom portal, below are the details:

CVE-2016-8635 Detail

TLS_DHE (DH) and TLS_ECDHE (DH) insecure
URL affected: https://axa.dxi-na1.saas.broadcom.com/

Environment

Release : 20.2

Component : CA DOI Foundations

Resolution

These 2 ciphers are not being used and no exposure to the customer exists because we do not support IE11 as a browser client. So, mainly a cleanup task from the frontend routers to remove the cipher.
The production update to remove these 2 ciphers was rolled out on 14Th May 2021.