OpenSSL Padding Oracle Information Disclosure (CVE-2016-2107

[Rahul_Borah]

Dear all,

Today I am faced with issues on all https traffic in my client infra (drop all https traffics). After the diagnosis of the issue, we have found that there is an issue with the IPS signature (OpenSSL Padding Oracle Information Disclosure (CVE-2016-2107)). After inactive the particular IPS signature, all https traffic is getting normal.

 So kindly share your comment if anyone faces this issue with this CVE.

Regards,

RB

 

[Danny]

This issue has been discussed here already.