"Weak SSL/TLS Key Exchange" vulnerability

CG_10653058 — Mon, 02 Oct 2023 12:45:36 GMT

Hello, our security software has found the "Weak SSL/TLS Key Exchange" vulnerability in a Java process. Java used: /usr/lib/jvm/java-1.8.0-amazon-corretto/bin/java -server -Dorg.opends.server.scriptName=start-ds org.opends.server.core.DirectoryServer --configClass org.opends.server.extensions.ConfigFileHandler --configFile /opt/ptc/Windchill_11.1/WindchillDS/server/config/config.ldif We tried to resolve the problem by modifying the ciphers in the java.security file, but it doesn't seem to work. Is there a way to resolve the vulnerability or will you release a new version that will fix the problem?

Windchill 11.1 M020-CPS23

Re: "Weak SSL/TLS Key Exchange" vulnerability

PaiChung — Tue, 18 Jul 2023 14:31:33 GMT

Please open a support case for this, that will get you the best answer for this.

Re: "Weak SSL/TLS Key Exchange" vulnerability

CG_10653058 — Tue, 18 Jul 2023 15:05:37 GMT

Hello PaiChung,

opened support case nr. 16962858

Thanks

topic "Weak SSL/TLS Key Exchange" vulnerability in Windchill

"Weak SSL/TLS Key Exchange" vulnerability

Re: "Weak SSL/TLS Key Exchange" vulnerability

Re: "Weak SSL/TLS Key Exchange" vulnerability