Description

This scan target was connected to over an unencrypted connection. A potential attacker can intercept and modify data sent and received from this site.

Remediation

The site should send and receive data over a secure (HTTPS) connection.

References

SSL/TLS Not Implemented | Invicti

Related Vulnerabilities

TLS/SSL certificate key size too small

Telerik.Web.UI.dll Cryptographic Weakness

The POODLE attack (SSLv3 with CBC cipher suites)

The Heartbleed Bug

TLS/SSL (EC)DHE Key Reuse

Severity

Medium

Classification

CWE-319 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N

Tags

Weak Crypto Sensitive Data Not Over Ssl