Detections
Analytics

1.26 IBMW-LS-001110

Information

The WebSphere Liberty Server must remove all export ciphers to protect the confidentiality and integrity of transmitted information.

GROUP ID: V-250347RULE ID: SV-250347r961632

Export grade encryption suites are not strong and do not meet DoD requirements. The encryption for the session becomes easy for the attacker to break. Do not use export grade encryption.

Solution

Review the ${server.config.dir}/server.xml file and if needed, modify the "enabledCiphers" setting for each affected SSL configuration.

<ssl id="myDefaultSSLConfig"keyStoreRef="defaultKeyStore"trustStoreRef="defaultTrustStore"clientAuthentication="true"sslProtocol="TLS"enabledCiphers="SSL_xxx_yyy_zzz"/>

where xxx, yyy, and zzz do not contain "EXPORT".

See Also

https://workbench.cisecurity.org/benchmarks/23823

Item Details

Category: SYSTEM AND COMMUNICATIONS PROTECTION

References: 800-53|SC-8, CCI|CCI-002418, Rule-ID|SV-250347r961632_rule, STIG-ID|IBMW-LS-001110, Vuln-ID|V-250347

Plugin: Unix

Control ID: ff94a203068601ff2755f2ee38fbcd371e83443ae4f7e5d969e7773219e98d20