Synopsis
The remote web server is affected by a security feature bypass vulnerability.
Description
According to its banner, the version of IBM HTTP Server running on the remote host is affected by a security feature bypass vulnerability, known as Bar Mitzvah, due to improper combination of state data with key data by the RC4 cipher algorithm during the initialization phase.
A man-in-the-middle attacker can exploit this, via a brute-force attack using LSB values, to decrypt the traffic.
Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.
Solution
Upgrade to IBM HTTP Server 7.0.0.39 / 8.0.0.11 / or 8.5.5.6 or later.