脆弱性スキャンでは「SSH サーバーは弱い鍵交換アルゴリズムをサポートしている」と報告されています
環境
- ONTAP 9.x
- SSH
問題
脆弱性スキャンレポートには「SSH Server Supports Weak Key Exchange Algorithms」と報告されており、詳細情報は次のとおりです：
The remote SSH server is configured to allow key exchange algorithms which are considered weak.
This is based on the IETF draft document Key Exchange (KEX) Method Updates and Recommendations for Secure Shell (SSH) draft-ietf-curdle-ssh-kex-sha2-20.
Section 4 lists guidance on key exchange algorithms that SHOULD NOT and MUST NOT be enabled.
This includes:
diffie-hellman-group-exchange-sha1
diffie-hellman-group1-sha1
gss-gex-sha1-*
gss-group1-sha1-*
gss-group14-sha1-*
rsa1024-sha1
Note that this plugin only checks for the options of the SSH server, and it does not check for vulnerable software versions.