Support #9929

SCP ID :##4959##] : pentest IB 2019

Added by Zahir Abd Latif over 5 years ago. Updated about 5 years ago.

Status:Work Completed-End life cycleStart date:April 30, 2019
Priority:NormalDue date:
Assignee:Zahir Abd Latif% Done:

100%

Category:RIBSpent time:-
Target version:-

Description

Hi,
Kindly attend below request:

Kindly refer as per SCP Email:- Re: [Request ID :##4959##] : pentest IB 2019

History

#1 Updated by Stephanie Sufrapto over 5 years ago

  • Assignee changed from Stephanie Sufrapto to Ahmad Hazri

Passing to Ateh.

#2 Updated by Stephanie Sufrapto about 5 years ago

Issue by Webpshere
Confirmed by IBM Support
1. TLS Version 1.0 Protocol Detection
- Fo current Production version, IBM HTTP Server version 7, only supported TLS 1.0. Not supported TLS 1.1 & 1.2 --> http://publib.boulder.ibm.com/httpserv/ihsdiag/ssl_questions.html#does-ihs-support-tlsv1-1-or-later-tls11
- You need to upgrade to latest version v9.

2. Return of Bleichenbacher's Oracle Threat (ROBOT) Information Disclosure
- There is interim fix for this : https://1drv.ms/u/s!AibLb2i0KKdHpglu1g3SUovDcH6M
- Follow the same guide to apply the fix pack .

Solution to upgrade to newer websphere version

#3 Updated by Stephanie Sufrapto about 5 years ago

  • Status changed from New - Begin Life Cycle to Work Completed-End life cycle
  • Assignee changed from Ahmad Hazri to Zahir Abd Latif
  • % Done changed from 0 to 100

Zahir please close this.
TQ

Also available in: Atom PDF