BUG-000086785 for Portal for ArcGIS

漏洞 ID 编号	BUG-000086785
已提交	April 9, 2015
上次修改时间	June 5, 2024
适用范围	Portal for ArcGIS
找到的版本	10.3
操作系统	Red Hat Enterprise Linux
操作系统版本	65 64 Bit
状态	Non-Reproducible

附加信息

For configuring web adaptor over https using WebLogic, refer to http://support.esri.com/ja/knowledgebase/techarticles/detail/41262

解决办法

Oracle released a patch for the POODLE vulnerability - http://www.oracle.com/technetwork/topics/security/poodlecve-2014-3566-2339408.html Oracle WebLogic Server should be started with a parameter to exclude SSL 2.0 and/or SSL 3.0 to in order to mitigate the SSL V3.0 "Poodle" Vulnerability. To do this, start the WebLogic Server with the JAVA_OPTION to use security protocol “TLS1” for working over https. For instance, Dweblogic.security.SSL.protocolVersion=TLS1 in the JAVA_OPTIONS variable setting in the DOMAIN_HOME/bin/setDomainEnv.sh file.