[Forgot Password]
Login  Register Subscribe

30389

 
 

423868

 
 

243238

 
 

909

 
 

192833

 
 

277

Paid content will be excluded from the download.


Download | Alert*
CCE
view XML

CCE-90955-6

Platform: cpe:/o:centos:centos:7, cpe:/o:redhat:enterprise_linux:7Date: (C)2017-06-29   (M)2023-07-04



Limit the ciphers to those algorithms which are FIPS-approved. Counter (CTR) mode is also preferred over cipher-block chaining (CBC) mode. The following line in '/etc/ssh/sshd_config' demonstrates use of FIPS-approved ciphers: 'Ciphers aes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,3des-cbc,aes192-cbc,aes256-cbc' The man page 'sshd_config(5)' contains a list of supported ciphers.


Parameter:

[cipher_list_1/cipher_list_2/cipher_list_3]


Technical Mechanism:

Approved algorithms should impart some level of confidence in their implementation. These are also required for compliance.

CCSS Severity:CCSS Metrics:
CCSS Score : 6.4Attack Vector: ADJACENT_NETWORK
Exploit Score: 0.5Attack Complexity: HIGH
Impact Score: 5.9Privileges Required: HIGH
Severity: MEDIUMUser Interaction: NONE
Vector: AV:A/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:HScope: UNCHANGED
 Confidentiality: HIGH
 Integrity: HIGH
 Availability: HIGH
  

References:
Resource IdReference
SCAP Repo OVAL Definitionoval:org.secpod.oval:def:30609
SCAP Repo OVAL Definitionoval:org.secpod.oval:def:31332


OVAL    2
oval:org.secpod.oval:def:30609
oval:org.secpod.oval:def:31332
XCCDF    4
xccdf_org.secpod_benchmark_SecPod_RHEL_7
xccdf_org.secpod_benchmark_SecPod_CentOS_7
xccdf_org.secpod_benchmark_general_CENTOS_7
xccdf_org.secpod_benchmark_general_RHEL_7
...

© SecPod Technologies