SAP Knowledge Base Article - Public

2790332 - SSL weak cipher suites supported - Security concern?

Symptom

When checking on SSL cipher suites, customer observes that weak SSL cipher are supported and that raises security concern.

Environment

SAP SuccessFactors HXM Suite

Cause

The “weak” ciphers are only in place to support other customers who may require it.

Resolution

Our URLs as of May 2019 received a A+ ratings from SSL Labs – this is the industry standard.  Further, there are no known vulnerabilities related to TLS 1.2.

It is entirely within the customer’s own control (configured on their own client web browsers, integration clients, client libraries, etc) to only use the strongest encryption supported, which mitigates any impact of the weak ciphers available.

This is being updated on August 2021 per the KBA 3049496 - TLS encryption protocol weak ciphers disablement for SAP SuccessFactors

See Also

3049496 - TLS encryption protocol weak ciphers disablement for SAP SuccessFactors

Keywords

SSL security, open SSL, ssl, , KBA , LOD-SF-PLT-SEC , Security Reports , Problem

Product

SAP SuccessFactors HXM Suite all versions