Description

The remote service encrypts traffic using SSL 3.0, an insecure and deprecated protocol with widely known weaknesses.

Remediation

Disable SSL 3.0 and use TLS 1.2 (or higher) instead.

References

How to disable SSLv3

Related Vulnerabilities

Web Application Firewall Detected

OData feed accessible anonymously

Apache Geronimo default administrative credentials

Apache Tomcat version older than 7.0.30

RoR Database Configuration File Detected

Severity

High

Classification

CWE-326 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N

Tags

Configuration Weak Crypto