Level 4

GraniteSslConnectorFactory AEM 6.3

4 replies
3439 views
Translate

Hi All,

need some info on com.adobe.granite.jetty.ssl.internal.GraniteSslConnectorFactory??

has any one got this "Bleichenbacher Oracle (ROBOT) Vulnerability ", If yes then how does this effect AEM??

The fix we got is to disable any ciphers that begin with TLS_RSA on all the instances.

I see by default we get four cipher entries starting with TLS_RSA*, disabling it an better idea.

Thanks,

Vikii

This post is no longer active and is closed to new replies. Need help? Start a new post to ask your question.

joerghoh

Employee

If it's security related, I would recommend to raise a ticket with Adobe support and let it confirm.

This vulnerability is related to a TLS cipher which is vulnerable. You can enable or disable specifc cipher suites in the OSGI config of Jetty (see the fields "Included cipher suites" and "Excluded cipher suites"). You should be able to disable the affected cipher suite here.

Jörg

Translate