Zurück
-
Titel
Is UC analytics vulnerable against CVE 2023 48795 Terrapin? -
Beschreibung
Can you confirm whether UC analytics is vulnerable against CVE-2023-48795 - Terrapin? -
Lösung
In the CVE 2023-48795
The Terrapin attack allows an attacker with the ability to intercept SSH traffic on the PAN-OS management network (machine-in-the-middle or MitM attacks) to downgrade connection security and force the usage of less secure client authentication algorithms when an administrator connects to PAN-OS software.
In UCA we are not using PAN-OS management network, so we are not affected by this CVE.