ROBOT Vulnerability

[jaimosky]

Hi,

I know it is out of scope, but anyone knows how to solve the vulnerability ROBOT?
Anybody had done this before?

Thanks a lot.
Jaime

[jaimosky]

I have just read this paper in internet.

http://www-01.ibm.com/support/docview.w ... as2MA46852

The only way to do that is to disable the RSA key exchange cipher suites.

[jeanmichel]

Hi,

Yes it appears that this type of attacks targets TLS-RSA or RSA ciphers and the only way to prevent this is to disable these ciphers in the QSSLCSL system value.