SSL Untrusted Root Certificate

Description

Acunetix detected that the SSL Certificate is not signed by the trusted root.

Remediation

The process of fixing untrusted root certificate issues varies depending on the host or the certificate authority used. Please refer to the corresponding documentation.

References

SSL Untrusted Root Certificate | Invicti

Related Vulnerabilities

Django Improper Certificate Validation Vulnerability (CVE-2020-13254)

Apache Tomcat Improper Certificate Validation Vulnerability (CVE-2018-8034)

Squid Improper Certificate Validation Vulnerability (CVE-2021-41611)

WebLogic Improper Certificate Validation Vulnerability (CVE-2021-3450)

SSL Secure renegotiation is not supported

Severity

Medium

Classification

CWE-295 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N