Insecure encryption algorithm - SSLContext
Description
An SSLContext object implements the specified secure socket protocol. However, not all protocols are equal and some legacy protocols, such as SSL, have proven to be insecure.
Impact
Decrypt traffic at the back-end level.
Recommendation
Only secure encryption with secure algorithms such as TLSv1.2 or higher should be allowed.
Threat
Unauthenticated internal attacker.
Expected Remediation Time
⏱️ 15 minutes.