"Weak SSL/TLS Key Exchange" vulnerability

[CG_10653058]

Hello, our security software has found the "Weak SSL/TLS Key Exchange" vulnerability in a Java process. Java used: /usr/lib/jvm/java-1.8.0-amazon-corretto/bin/java -server -Dorg.opends.server.scriptName=start-ds org.opends.server.core.DirectoryServer --configClass org.opends.server.extensions.ConfigFileHandler --configFile /opt/ptc/Windchill_11.1/WindchillDS/server/config/config.ldif We tried to resolve the problem by modifying the ciphers in the java.security file, but it doesn't seem to work. Is there a way to resolve the vulnerability or will you release a new version that will fix the problem?

Windchill 11.1 M020-CPS23

[PaiChung · Accepted solution]

Please open a support case for this, that will get you the best answer for this.

[CG_10653058]

Hello PaiChung,

opened support case nr. 16962858

Thanks