Weak Ciphers Enabled

Disclosed: 2014-04-09 06:40:08 By yourdarkshadow To khanacademy
Unknown
Vulnerability Details
Vulnerability Details:- I detected that weak ciphers are enabled during secure communication (SSL). You should allow only strong ciphers on your web server to protect secure communication with your visitors. Impact:- Attackers might decrypt SSL traffic between your server and your visitors. Remedy:- Configure your web server to disallow using weak ciphers. POC Link :- https://www.ssllabs.com/ssltest/analyze.html?d=www.khanacademy.org&s=23.23.224.106
Actions
View on HackerOne
Report Stats
  • Report ID: 6488
  • State: Closed
  • Substate: resolved
  • Upvotes: 8
Share this report