Skip to content

TLS Server Supports TLS version 1.0 #106

@zisanyavuz

Description

@zisanyavuz

A high severity infra vulnerability has been discovered.

Infra Group: test2,test79 - test

Scanner Name: rapid7infra

Target: 172.67.159.157 : 443

Service: HTTPS

Exploitable: false

Protocol: tcp


Proof: Successfully connected over TLSv1.0

Tool Description: The PCI (Payment Card Industry) Data Security Standard requires a minimum of TLS v1.1 and recommends TLS v1.2. In addition, FIPS 140-2 standard requires a minimum of TLS v1.1 and recommends TLS v1.2..
CVSS2 score: 4.300000
Service Name:
Port:
Protocol:
Proof:
Service Name: HTTPS
Port: 443
Protocol: tcp
Proof: Successfully connected over TLSv1.0

Kondukto Link: https://9a4f-104-155-30-65.ngrok-free.app/projects/6703db4e0fadccdc7e5dfc4c/vulns/infra?page=1&perPage=15&id=in:672b2208b6c9a7516937c083
Deeplink: https://10.20.104.26:3780//vulnerability/vuln-summary.jsp?vulnid=tlsv1_0-enabled

Metadata

Metadata

Assignees

Labels

KONDUKTObugSomething isn't working

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions