Detections
Analytics
TLS 1.2 Not Supported Protocol
medium Web App Scanning Plugin ID 98616
Language:
Synopsis
TLS 1.2 Not Supported ProtocolDescription
The remote server does not offer TLS 1.2 protocol which is required to provide good encryption securitySolution
Reconfigure the affected server to enable TLS 1.2 protocol.See Also
https://www.iana.org/assignments/tls-parameters/tls-parameters.xhtml
Plugin Details
Severity: Medium
ID: 98616
Type: remote
Family: SSL/TLS
Published: 6/10/2019
Updated: 11/26/2021
Scan Template: api, basic, config_audit, full, pci, quick, scan, ssl_tls
Risk Information
VPR
Risk Factor: Medium
Score: 4.2
CVSS v2
Risk Factor: Medium
Base Score: 5.8
Vector: CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:N
CVSS Score Source: Tenable
CVSS v3
Risk Factor: Medium
Base Score: 6.5
Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N
CVSS Score Source: Tenable
Reference Information
CWE: 327
OWASP: 2010-A9, 2013-A6, 2017-A3, 2021-A2
WASC: Insufficient Transport Layer Protection
CAPEC: 20, 459, 473, 475, 608, 614, 97
DISA STIG: APSC-DV-002440
HIPAA: 164.306(a)(1), 164.306(a)(2)
ISO: 27001-A.10.1.2
NIST: sp800_53-SC-12
OWASP API: 2019-API7, 2023-API8
OWASP ASVS: 4.0.2-9.1.2