topic Re: TEN-142960 in Network Security

TEN-142960

tlmckinnon94 — Wed, 04 Sep 2024 15:23:21 GMT

How to remediate this on CIMC devices. The remote HTTPS server does not send the HTTP
"Strict-Transport-Security" header.

Re: TEN-142960

Mark Elsen — Wed, 04 Sep 2024 15:44:10 GMT

- For a cisco device you then need to use the latest (advisory) software version for the involved device , if applicable and or upgrade CIMC software too , if available as a separate component.

- If that does not help contact TAC if that is important for business, M.

Re: TEN-142960

Flavio Miranda — Wed, 04 Sep 2024 15:51:32 GMT

@tlmckinnon94

Upgrade to version 4.1(2a) or 4.1(1a)

https://bst.cisco.com/quickview/bug/CSCvs27322

Re: TEN-142960

tlmckinnon94 — Wed, 04 Sep 2024 16:13:38 GMT

Thank you. I'm seeing this vulnerability on version 3.2.

Re: TEN-142960

Mark Elsen — Wed, 04 Sep 2024 16:39:21 GMT

- From : https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvs27322
>...

Known Fixed Releases
4.1(2a)UCSM

             4.1(1a)
  M.