Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
SSL/TLS Not Implemented - Vulnerability Database

SSL/TLS Not Implemented

Description

This scan target was connected to over an unencrypted connection. A potential attacker can intercept and modify data sent and received from this site.

Remediation

The site should send and receive data over a secure (HTTPS) connection.

References

SSL/TLS Not Implemented | Invicti

Related Vulnerabilities

Weak password High
Common tags: API Misconfiguration
GraphQL Non-JSON Queries over POST: Potential CSRF Vulnerability Medium
Common tags: API Misconfiguration
HTTP Strict Transport Security (HSTS) Policy Not Enabled Medium
Common tags: API Misconfiguration
Insecure Referrer Policy Information
Common tags: API Misconfiguration
Insecure HTTP Usage Medium
Common tags: Sensitive Data Not Over SSL

Severity

Medium

Classification

CWE-319
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N

Tags

Weak Crypto
Sensitive Data Not Over SSL
API Misconfiguration