HPE Community
Server Management - Systems Insight Manager
1752481 Members
5660 Online
108788 Solutions
New Discussion

HP System Management Homepage and SSL Server Allows Anonymous Authentication Vulnerability issue

 
BastianW
Advisor

‎10-12-2015 01:42 AM

‎10-12-2015 01:42 AM

Re: HP System Management Homepage and SSL Server Allows Anonymous Authentication Vulnerability issue

Isn´t RC4 weak? I read a posting here, that this is the case. So a better solution might be to disable RC4 as well and leave only the "secure cipher" in place. I found here a short how to which worked for me. Maybe somebody else will find that usefull as well.

0 Kudos
Reply
Richie55
Occasional Visitor

‎11-25-2020 06:30 PM

‎11-25-2020 06:30 PM

Re: HP System Management Homepage and SSL Server Allows Anonymous Authentication Vulnerability issue

Try; " smhconfig.exe -Z AES256-SHA" instead of RC4-SHA as it is more secure.

0 Kudos
Reply
The opinions expressed above are the personal opinions of the authors, not of Hewlett Packard Enterprise. By using this site, you accept the Terms of Use and Rules of Participation.