Test ID:	1.3.6.1.4.1.25623.1.0.108022
Category:	SSL and TLS
Title:	SSL/TLS: Report 'Null' Cipher Suites
Summary:	This routine reports all 'Null' SSL/TLS cipher suites accepted; by a service.
Description:	Summary: This routine reports all 'Null' SSL/TLS cipher suites accepted by a service. Vulnerability Insight: Services supporting 'Null' cipher suites could allow a client to negotiate an SSL/TLS connection to the host without any encryption of the transferred data. Vulnerability Impact: This could allow remote attackers to obtain sensitive information or have other, unspecified impacts. Affected Software/OS: All services providing an encrypted communication using 'Null' SSL/TLS cipher suites. Solution: The configuration of this services should be changed so that it does not accept the listed 'Null' cipher suites anymore. Please see the references for more resources supporting you in this task. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Copyright	Copyright (C) 2016 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.