You may not know it, but your cpanel program trips level 1 PCI, Level 3 Vista/MC Card compliance by allowing SSL Version 2 which has known security vulnerabilities to go unchecked. The bug was reported back in march and am sure it's been there long before then. Vote for http://bugzilla.cpanel.net/show_bug.cgi?id=6413 and alrert your security compliance officer/PCI responsible person to complain to Cpanel and someone should post a CERN CVE on the issue.



LinkBack URL
About LinkBacks
Reply With Quote





