Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
Insecure Transportation Security Protocol Supported (SSLv3) - Vulnerability Database

Insecure Transportation Security Protocol Supported (SSLv3)

Description

The remote service encrypts traffic using SSL 3.0, an insecure and deprecated protocol with widely known weaknesses.

Remediation

Disable SSL 3.0 and use TLS 1.2 (or higher) instead.

References

How to disable SSLv3

Related Vulnerabilities

Insecure Transportation Security Protocol Supported (TLS 1.0) High
Common tags: Configuration Weak Crypto
TLS/SSL Sweet32 attack Medium
Common tags: Configuration Weak Crypto
The Heartbleed Bug High
Common tags: Configuration Weak Crypto
Padding oracle attack High
Common tags: Configuration Weak Crypto
Insecure Transportation Security Protocol Supported (TLS 1.1) Information
Common tags: Configuration Weak Crypto

Severity

High

Classification

CWE-326
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N
CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N

Tags

Configuration
Weak Crypto