Forum Discussion
Samir_Jha_52506
Noctilucent
NoctilucentEliminate CBC (CVE-2016-6907) from default cipher
Hi Expert,
Recently receive alert from F5 they have mention that, there is vulnerability(CVE-2016-6907 )with CBC cipher. can any one help me to eliminate CBC cipher from default list.
Thanks
1 Reply
JGCumulonimbus
The sol article related to this is: sol39508724: TMM SSL/TLS virtual server vulnerability CVE-2016-6907.
You will also find this article helpful: sol13171: Configuring the cipher strength for SSL profiles (11.x)".
Essentially you can edit the SSL profile and define the "Ciphers" as "DEFAULT:!CBC".
