Drop support for insecure TLS ciphers
Details
| Detail name | Value |
|---|---|
| Changelog Number | 20344 |
| Type | Bug |
| Status | Resolved |
| Affected Versions | Exasol 8.0.0 |
| Fix Versions | Exasol 2025.1.0 |
| Resolution Date | 2025-07-08 |
Description
Insecure TLS ciphers affected by ROBOT (https://www.usenix.org/system/files/conference/usenixsecurity18/sec18-bock.pdf) attack were enabled in the service on port 4444.
Workaround
No workaround.
Fix
All ciphers starting with TLS_RSA_* have been disabled from the service on port 4444.