Vulnerable protocols used by Applications Manager's SSHDServer process

Products

• CA Automic Applications Manager (AM)

Issue/Introduction

The SSHDServer process using the following protocols that have been reported to be vulnerable to exploit.

Ciphers:
aes128-cbc
aes192-cbc
aes256-cbc

MAC:
[email protected]
hmac-sha1

Key algorithms:
ssh-rsa

Environment

Applications Manager 9.4.0 to 9.5.2

Resolution

Fixed in Applications Manager version 9.5.3 available now and 9.6.0 available Q4 2024. Applications Manger version 9.5.3/9.6 removes vulnerable ciphers and introduces 5 new awenv.ini parameters to control the SSHDServer process:

SSHD_CIPHERS
SSHD_MACS
SSHD_SIGNATURES
SSHD_COMPRESSIONS
SSHD_KEX

These parameters allows for disabling any future vulnerable keys, ciphers, etc. that may be found.