SSL Certificate vulnerabilities

[DuBu]

Hi 

During one of the vulnerability scan, our security team came up with the below vulnerabilities for our UC Servers (CUCM/CUC). Can someone help understand about these vulnerabilities and the possible remediation for them

SSL Self-Signed Certificate
SSL Certificate Cannot Be Trusted
SSL Null Cipher Suites Supported
SSH Server CBC Mode Ciphers Enabled -- CVE-2008-5161;http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5161

[Jonathan Schulenberg]

First search result: CSCva42141 Disable CBC Ciphers in SSHD.. Upgrade to a fixed-in release or contact TAC for a workaround. 

[DuBu]

Thanks Jonathan, We are on 12.5 SU6 , for  CSCva42141 Disable CBC Ciphers in SSHD. looks like the fix is present in ES release but as we plan to go to 14 soon i guess that should not be a problem but shall check with TAC

Any idea on the others in the list?

Thanks