脆弱なスキャンにより、「SSHサーバは脆弱な鍵交換アルゴリズムをサポートしています」と報告されます。
環境
- ONTAP 9
- SSH
問題
脆弱なスキャンでは、「SSH Server Supports Weak Key Exchange Algorithms」という情報が報告されます。詳細は次のとおりです。
The remote SSH server is configured to allow key exchange algorithms which are considered weak.
This is based on the IETF draft document Key Exchange (KEX) Method Updates and Recommendations for Secure Shell (SSH) draft-ietf-curdle-ssh-kex-sha2-20.
Section 4 lists guidance on key exchange algorithms that SHOULD NOT and MUST NOT be enabled.
This includes:
diffie-hellman-group-exchange-sha1
diffie-hellman-group1-sha1
gss-gex-sha1-*
gss-group1-sha1-*
gss-group14-sha1-*
rsa1024-sha1
Note that this plugin only checks for the options of the SSH server, and it does not check for vulnerable software versions.