When using a vulnerability scanner against SCSP, the scanner reports a vulnerability of the certificate which is used by SCSP due to the MD5 signature algorithm.
In previous versions, the certificate was signed with the MD5 hash algorithm, in which the digital signature strength was 16 Bytes. The MD5 hash algorithm has a vulnerability that it can be cracked through parallel computing.
Symantec is aware of the vulnerability and has replaced MD5 to SHA1 as the hash algorithm to sign the signature in the version 5.2.7 or later.
To avoid the vulnerability, upgrade to the latest version.
Imported Document Id
This is machine translated content
Login to Subscribe
Please login to set up your
For security reasons, your link to this document has expired. Please click on the attachment link to access this file.
The attachment that you are looking for no longer exists.
There has been an issue retrieving your attachment. Please try again.
Currently server is down.
Didn't find the article you were looking for? Try these resources.