SSL Certificate Is About To Expire

Severity: Medium

Summary#

Invicti detected an SSL certificate that is about to expire soon.

Impact#

Upon expiration, It can impact both the website and the users:

Warning error messages displayed by browsers when visiting the site
Personal information at risk from man-in-the-middle attacks
Reduction in trust as the site becomes insecure
Ability for an attacker to create an identical phishing website

Remediation#

The process of renewing the SSL certificate varies depending on the host or the certificate authority used. Please refer to the corresponding documentation.

Classifications#

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N, OWASP 2017-A3, CWE-295