lucky13 vulnerability

[umar7]

502107707 SSL/TLS Strength connects.lionglobalinvestors.com connects.lionglobalinvestors.com Lucky Thirteen Vulnerability 05/23/2022 01/11/2023 SSL-033 Failed lucky13 vulnerability found. potentially vulnerable, uses TLS CBC ciphers Low 2.3 Active The Lucky Thirteen attack is a cryptographic timing attack against implementations of the Transport Layer Security (TLS) protocol that use the CBC mode of operation. OpenSSL, NSS, GnuTLS, yaSSL, PolarSSL, Opera, and BouncyCastle have released patches to protect TLS in CBC-mode against our attacks. Apply the corresponding patch which can be found at http://www.isg.rhul.ac.uk/tls/Lucky13.html "https://en.wikipedia.org/wiki/Lucky_Thirteen_attack https://arstechnica.com/information-technology/2013/02/lucky-thirteen-attack-snarfs-cookies-protecte... http://www.isg.rhul.ac.uk/tls/Lucky13.html" Very High

hello team i have attached the below vulnerability i need to mitigate this but i know how to solve the first TLS vulneraility i dont know the lucky13 vulnerability kindly can anyone help me to get solve this issue .it would be very helpful.

[the_rock]

I tried opening the file attached, but no matter how big I make it, cant see anything, sorry : (. Can you try attach it as normal screenshot?

[the_rock]

Is there CVE for it? I cant find much in inspection settings or IPS protections.

[umar7]

CVE - 2013-0169

[PhoneBoy]

Are you trying to mitigate a found vulnerability on a Check Point device? (If so, what version/JHF level)
Or are you trying to mitigate a found vulnerability on a website protected by a Check Point firewall running Threat Prevention?

In any case, it doesn't seem like a high-severity vulnerability since attackers generally need to be located on the same LAN they are attacking to launch a successful attack.
See: https://crashtest-security.com/prevent-ssl-lucky13/ 

[PhoneBoy · Accepted solution]

Refer to the following SK, which has an official statement on CVE-2013-0169: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solut...
If you need more details, please consult with the TAC.

[the_rock]

To add to what phoneboy said, based on below does not appear its really a vulnerability to be overly concerned about:

https://nvd.nist.gov/vuln/detail/cve-2013-0169

Andy

[G_W_Albrecht]

So what was the final decision here and what was done ?