We have VA scan on ESXI 6.0 u3. It reported vulnerability of "Return Of Bleichenbacher's Oracle Threat (ROBOT) Information Disclosure"

[Mahesh_999]

We have VA scan on ESXI 6.0 u3. It reported vulnerability of "Return Of Bleichenbacher's Oracle Threat (ROBOT) Information Disclosure" and solution reported as below. Upgrade to a patched version of the software. Alternatively, disable RSA key exchanges.

Solution :

Upgrade to a patched version of the software. Alternatively, disable RSA key exchanges.

more information:

https://robotattack.org/

https://support.f5.com/csp/article/K21905460

https://support.citrix.com/article/CTX230238

please help us how to fix this vulnerability

[SupreetK · Accepted solution]

Looks like ESXi is not affected by this vulnerability Please check the below KB -

VMware Knowledge Base

Cheers,

Supreet

[Mahesh_999]

Thank for your response. Is there any step to resolve both the conditions

[SupreetK]

Since it is not applicable to ESXi, I don't we need to worry about any resolution

Cheers,

Supreet

[Mahesh_999]

Thanks 🙂