CVP Certificate Vulnerability

[Muhammed Ashiq]

Hi,

We have CVP 11.6 with UCCE 11.6

Security team came with below findings for CVPs and we are not able to locate where is this Certificate installed. We have regenerated CVP call server,vxml server,and wsm certifiactes already with SHA256 from SHA1.

Plugin	Plugin Name	IP Address	Protocol	Port
35291	SSL Certificate Signed Using Weak Hashing Algorithm	xx.xx.xx.xxx	TCP	5061

How we can locate this and regenerate with SHA256

[Ramamoorthy Shanmugam]

Hi Muhammed,

Normally we Exchange Self-Signed /CA Singed Certificates in a UCCE/PCCE Solution from 12.5.x onwards. Maybe check the below link to locate the CVP cert’s locations.

https://www.cisco.com/c/en/us/support/docs/contact-center/unified-contact-center-enterprise/215445-exchange-self-signed-certificates-in-a-u.html#anc11

[bill.king1]

Is it possible you have it installed for web services use like outlined here?
https://www.cisco.com/c/en/us/support/docs/contact-center/unified-customer-voice-portal-1161/214674-connfigure-third-party-web-server-certif.html

[Muhammed Ashiq · Accepted solution]

Dears,

Thanks for the replies.

We already regenerated the Call Server/VXML Server certificate using SHA256 and the finding from security team was a false positive (after multiple scan the finding didn't appeared) trigger.