Detections
Analytics

SSL/TLS Weak Key Exchange Supported

medium Web App Scanning Plugin ID 113316

Language:

Synopsis

SSL/TLS Weak Key Exchange Supported

Description

The remote host supports SSL/TLS key exchanges that are cryptographically weaker than recommended. Key exchanges must be recommended by IANA and should provide at least 224 bits of security, which translates to a minimum key size of 2048 bits for Diffie Hellman and RSA key exchanges.

Solution

Reconfigure the affected application, if possible to avoid the use of weak key exchange.

See Also

https://www.iana.org/assignments/tls-parameters/tls-parameters.xhtml

Plugin Details

Severity: Medium

ID: 113316

Type: remote

Family: SSL/TLS

Published: 8/8/2022

Updated: 11/10/2022

Scan Template: api, basic, config_audit, full, pci, quick, scan, ssl_tls

Risk Information

VPR

Risk Factor: Low

Score: 3.3

CVSS v2

Risk Factor: Medium

Base Score: 4

Vector: CVSS2#AV:N/AC:H/Au:N/C:P/I:P/A:N

CVSS Score Source: Tenable

CVSS v3

Risk Factor: Medium

Base Score: 4.8

Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N

CVSS Score Source: Tenable

Reference Information