Sweet32 and SolarWinds Access Rights Manager (ARM) - CVE-2016-2183 and CVE-2016-6329

11/27/2019 10:39 AM

1/9/2020 3:17 PM

Sweet32 is a vulnerability in 3DES-CBC ciphers that attacks 64-bit block ciphers in TLS and OpenVPN.

https://cve.mitre.org/cgi-bin/cvenam...=CVE-2016-2183 (© 2018 The MITRE Corporation, available at http://cve.mitre.org, obtained on November 14, 2018)

https://cve.mitre.org/cgi-bin/cvenam...=CVE-2016-6329 (© 2018 The MITRE Corporation, available at http://cve.mitre.org, obtained on November 14, 2018)

Access Rights Manager

3rd part product vulnerability.

According to tests performed against ARM 2019.4 there is no impact on basic product functionality after attempt to mitigate this vulnerability by disabling 3DES cipher suites.

Follow steps below to mitigate vulnerabilities:

1. Log in to the ARM server as an administrator.
2. Upgrade to ARM 2019.4 to fix vulnerability of RabbitMQ.
3. If you run the web components on a different server, log into this server as an administrator.
4. Download and install IIS Crypto from Nartac. (© 2013 Nartac Software, available at https://www.nartac.com/, obtained on Feb 3, 2017.)
5. Open the tool.
6. Select Schannel, and clear the Triple DES 168 selection. This will disable the cipher. Please make sure that no other web application installed on the same IIS requires this.
7. Apply changes and restart the computer.

Disclaimer: Please note, any content posted herein is provided as a suggestion or recommendation to you for your internal use. This is not part of the SolarWinds software or documentation that you purchased from SolarWinds, and the information set forth herein may come from third parties. Your organization should internally review and assess to what extent, if any, such custom scripts or recommendations will be incorporated into your environment.  You elect to use third party content at your own risk, and you will be solely responsible for the incorporation of the same, if any.