IV82807: LOW SEVERITY VULNERABILITY "SSH WEAK MAC ALGORITHMS ENABLED:

APAR status

• Closed as program error.

Error description

• Result of Nessus scan on ISPIM 2.0.2 appliance result
  revealed a 'low' severity vulnerability citing
  "SSH Weak MAC Algorithms Enabled".
  Technote
  http://www-01.ibm.com/support/docview.wss?uid=swg21902103
  "SSH Weak MAC Algorithms Enabled" vulnerability mitigation on
  Network IPS appliances"
  instructs how to fix this to place these two lines at the end
  of file /etc/ssh/sshd_config
  Ciphers
  aes128-ctr,aes192-ctr,aes256-ctr,arcfour256,arcfour128,ar cfour
  MACs hmac-sha1,hmac-ripemd160
  Using the facilities of the appliance dashboard options,
  causing these two lines to be so added was not possible.
  

Local fix

Problem summary

• Result of Nessus scan on ISPIM 2.0.2 appliance result
  revealed a 'low' severity vulnerability citing
  "SSH Weak MAC Algorithms Enabled".
  Technote
  http://www-01.ibm.com/support/docview.wss?uid=swg21902103
  "SSH Weak MAC Algorithms Enabled" vulnerability mitigation on
  Network IPS appliances"
  

Problem conclusion

• Fixed in 2.0.2.6
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  SEC PIM VIRTAPP

• Fixed component ID

  5725H30VA

Applicable component levels

• R202 PSY

     UP