Anonymous Ciphers Supported
Severity:
Medium
Summary
Invicti detected that anonymous ciphers is supported during secure communication (SSL).
You should allow only strong ciphers on your web server to protect your secure communication with your visitors.
Impact
Attackers can perform man-in-the middle attacks and observe the encrypted traffic between your website and your visitors.
Remediation
Required Skills for Successful Exploitation
Actions To Take
Configure your web server to disallow using anonymous ciphers.
For Apache, you should modify the SSLCipherSuite directive in the httpd.conf. For more configuration, please refer to External References section.
SSLCipherSuite ALL:!aNULL:!ADH:!eNULL:!LOW:!EXP:RC4+RSA:+HIGH:+MEDIUM
Vulnerability Index
You can search and find all vulnerabilities
Select Category
Select Vulnerability
Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.
Featured resources
Build your resistance to threats. And save hundreds of hours each month.
