Skip to content

TLS Server Supports TLS version 1.1 #107

@zisanyavuz

Description

@zisanyavuz

A medium severity infra vulnerability has been discovered.

Infra Group: test2,test79 - test

Scanner Name: rapid7infra

Target: 172.67.159.157 : 443

Service: HTTPS

Exploitable: false

Protocol: tcp


Proof: Successfully connected over TLSv1.1

Tool Description: The PCI (Payment Card Industry) Data Security Standard requires a minimum of TLS v1.1 and recommends TLS v1.2. In addition, FIPS 140-2 standard requires a minimum of TLS v1.1 and recommends TLS v1.2..
CVSS2 score: 2.600000
Service Name:
Port:
Protocol:
Proof:
Service Name: HTTPS
Port: 443
Protocol: tcp
Proof: Successfully connected over TLSv1.1

Kondukto Link: https://9a4f-104-155-30-65.ngrok-free.app/projects/6703db4e0fadccdc7e5dfc4c/vulns/infra?page=1&perPage=15&id=in:672b22085460e6a3b6582eae
Deeplink: https://10.20.104.26:3780//vulnerability/vuln-summary.jsp?vulnid=tlsv1_1-enabled

Metadata

Metadata

Assignees

Labels

KONDUKTObugSomething isn't working

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions