(PVS) Signatures - Tenable Network Security

PVS ID: 1104 FAMILY: Web Servers
RISK:
MEDIUM
NESSUS ID:10863
Description: Synopsis :\n\nThe remote SSL Server is configured to use weak encryption\n\nThe SSL
server allows clients to connect using weak (export grade) Ciphers. As these ciphers are
more easily cracked or hijacked, there is the potential of a remote session being taken over
or observed. There is a risk of potential loss of confidential data.
Solution: Disable weak ciphers on the TLS/SSL server.
CVE Not available
Weak SSL Ciphers Supported
PVS ID: 1105 FAMILY: Web Servers RISK: LOW NESSUS ID:10863
Description: Synopsis :\n\nThe remote SSL Server is configured to use weak encryption\n\nThe SSL
server allows clients to connect using weak (export grade) Ciphers. As these ciphers are
more easily cracked or hijacked, there is the potential of a remote session being taken over
or observed. There is a risk of potential loss of confidential data.
Solution: Disable weak ciphers on the TLS/SSL server.
CVE Not available
Internet Key Exchange (IKE) Server Detection
PVS ID: 1106 FAMILY: Generic
RISK:
MEDIUM
NESSUS ID:11935
Description: The remote host seems to be enabled to do Internet Key Exchange (IKE). This is typically
indicative of a VPN server. VPN servers are used to connect remote hosts into internal
resources. You should ensure that: the VPN is authorized for your Companies computing
environment, the VPN utilizes strong encryption and that the VPN utilizes strong
authentication.
Solution: Contact your VPN vendor to ensure that you are operating at a security level commensurate
with the assets being protected.
CVE Not available
Cisco IOS Version Detection
PVS ID: 1107 FAMILY: Operating System Detection RISK: INFO NESSUS ID:Not Available
Description: The remote host is running Cisco IOS version %L
Solution: N/A
CVE Not available
Passive Vulnerability Scanner (PVS) Signatures
Family Internet Services 282