V-288293

Discussion

Using older unauthorized versions or incorrectly configuring protocol negotiation makes the gateway vulnerable to known and unknown attacks that exploit vulnerabilities in this protocol. If unsecured protocols (lacking cryptographic mechanisms) are used for the transmission of data, the contents of the data becomes vulnerable to known and unknown attacks that exploit vulnerabilities in this protocol. Examples of unsecured protocols include HTTP, FTP, NTLM, Telnet, etc.

Check Content

Review the application documentation and deployed configuration to determine whether the application prohibits or restricts the use of protocols that transmit unencrypted authentication information or uses flawed cryptographic algorithms for transmission.

If the application does not prohibit or restrict the use of protocols that transmit unencrypted authentication information or use flawed cryptographic algorithms for transmission, this is a finding.