語系:
https://blog.mozilla.org/security/2018/10/15/removing-old-versions-of-tls/
https://blogs.windows.com/msedgedev/2018/10/15/modernizing-tls-edge-ie11/
https://security.googleblog.com/2018/10/modernizing-transport-security.html
https://webkit.org/blog/8462/deprecation-of-legacy-tls-1-0-and-1-1-versions/
嚴重性: Medium
ID: 112546
類型: remote
系列: SSL/TLS
已發布: 2018/2/13
已更新: 2023/6/28
掃描範本: api, basic, config_audit, full, pci, quick, scan, ssl_tls
風險因素: Medium
分數: 4.2
風險因素: Medium
基本分數: 6.1
媒介: CVSS2#AV:N/AC:H/Au:N/C:C/I:P/A:N
CVSS 評分資料來源: Tenable
風險因素: Medium
基本分數: 6.5
媒介: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N
CVSS 評分資料來源: Tenable
CWE: 327
OWASP: 2010-A9, 2013-A6, 2017-A3, 2021-A2
WASC: Insufficient Transport Layer Protection
CAPEC: 20, 459, 473, 475, 608, 614, 97
DISA STIG: APSC-DV-002440
HIPAA: 164.306(a)(1), 164.306(a)(2)
ISO: 27001-A.10.1.2
NIST: sp800_53-SC-12
OWASP API: 2019-API7, 2023-API8
OWASP ASVS: 4.0.2-9.1.2