NetApp Console 连接器上的 SSH 弱密钥交换漏洞

最后更新
另存为PDF

Views:: 25

Visibility:: Public

Votes:: 0

Category:: cloud-manager

Specialty:: netapp_console

Last Updated:

适用于

NetApp Console 连接器（代理）
打开 SSH

问题

由于启用了弱 SSH 密钥交换算法，安全工具在 Connector 上报告了漏洞 VULM-41063。

Connector 输出：

[root@cvo-connector-prod ~]# sshd -T | grep kexalgorithms

gssapikexalgorithms gss-group14-sha256-,gss-group16-sha512-,gss-nistp256-sha256-,gss-curve25519-sha256-,gss-group14-sha1-,gss-gex-sha1-

kexalgorithms curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256,diffie-hellman-group14-sha1

[root@cvo-connector-prod ~]#

[root@cvo-connector-prod ~]# sshd -T | grep gssapikexalgorithms

gssapikexalgorithms gss-group14-sha256-,gss-group16-sha512-,gss-nistp256-sha256-,gss-curve25519-sha256-,gss-group14-sha1-,gss-gex-sha1-

[root@cvo-connector-prod ~]#

它显示启用了以下弱算法：

gssapikexalgorithms：gss-group14-sha1-，gss-gex-sha1-

kexalgorithms：diffie-hellman-group14-sha1