We just found SSLv3 "POODLE" vulnerability alerts from our IPS system. And our Splunk Universal Forwarder is in 6.4.2.
I thought the SSLv3 POODLE issue only appear at Splunk version earlier than 6.3?
Should I use the same workaround mention here?
https://answers.splunk.com/answers/176970/is-it-possible-to-disable-ssl-v3-on-the-universal.html
Many thanks in advance.
↧