Description

Identifies Application Load Balancers (ALBv2) that use weak or outdated SSL/TLS cipher suites in their SSL policies. Using insecure ciphers can expose encrypted traffic to cryptographic attacks, potentially compromising sensitive data in transit.

Detection Strategy

• Scans all Application Load Balancers in the specified AWS region

• For each load balancer, examines the SSL policies configured on its HTTPS listeners

• Reports a vulnerability if any listener uses cipher suites like ECDHE-RSA-AES128-SHA, AES128-SHA, or other outdated ciphers

• Each vulnerability includes the specific load balancer ARN and the insecure cipher being used