Hi We have a Windows 2008R2 SP1 server system running Oacle with OpenSSL. Upon doing a security scan we have found out that we are getting: OpenSSL oracle padding vulnerability(CVE-2016-2107) vulnerability.
Threat: A MITM attacker can use a padding oracle attack to decrypt traffic. Impact: A MITM attacker can use a padding oracle attack to decrypt traffic when the connection uses an AES CBC cipher and the server support AES-NI.
What steps on the Windows side can we take to remediate this issue?