SSH security vulnerability or Policy Server and other components

Products

• CA Single Sign On Agents (SiteMinder)
• SITEMINDER

Issue/Introduction

When running SiteMinder on Linux machines, the "SSH Weak Key Exchange Algorithms Enabled" vulnerability has been discovered.

  The remote SSH server is configured to allow key exchange algorithms which are considered weak.

 

Resolution

The SSH services are distinct products of SiteMinder.

They are used to allow connection to the machine and they aren't related to HTTP or HTTPS traffic protected by SiteMinder.

To solve this vulnerability, open a ticket with the Linux OS distributor to investigate those vulnerabilities by SSH product.