CVE/CWE/OTG: CVE-2013-0169 - Vulnerability Recommendations

Products

• CA Identity Suite

Issue/Introduction

It is requested to validate the attached ethical hacking document generated by the client and to be able to validate the CVE/CWE/OTG: CVE-2013-0169, the recommendation is to Disable the use of this encryption and use AEAD encryption such as AESGCM instead

Reference: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0169

 

Environment

Release : 14.4

Resolution

L2 confirmed confirmed CVE-2013-0169 does not affect the system. Reference L2 DE512231.  

grep -i sslcipher /etc/httpd/conf.d/ssl.conf

Note: If  There are no 64 bit ciphers in the list. Then the server is not vulnerable to SWEET32.

SSLCipherSuite ECDH+AESGCM:DH+AESGCM:ECDH+AES256:DH+AES256:ECDH+AES128:DH+AES:RSA+AESGCM:RSA+AES:!aNULL:!MD5:!DSS

there is not 64 bit ciphers on the list above

IDM is not vulnerable but this CVE was resolved in 14.4 CP2 and all later releases.