Vulnerable protocols used by Applications Manager's SSHDServer process

Products

• CA Automic Applications Manager (AM)

Issue/Introduction

The SSHDServer process using the following protocols that have been reported to be vulnerable to exploit.

Ciphers:
aes128-cbc
aes192-cbc
aes256-cbc

MAC:
[email protected]
hmac-sha1

Key algorithms:
ssh-rsa

Environment

Applications Manager 9.4.0 to 9.5.2

Resolution

Fixed in Applications Manager version 9.5.3 and V 9.6.x is avalible now, The latest in 9.6. is V 9.6.2

Applications Manger version 9.5.3/9.6.x removes vulnerable ciphers and introduces 5 new awenv.ini parameters to control the SSHDServer process:

SSHD_CIPHERS
SSHD_MACS
SSHD_SIGNATURES
SSHD_COMPRESSIONS
SSHD_KEX

These parameters allows for disabling any future vulnerable keys, ciphers, etc. that may be found.