Network misconfigurations

ALB outdated Security Policy

Risk Level

Informational (4)

Platform(s)
Compliance Frameworks

Description

An ALB listener is using an outdated security policy to negotiate SSL connections between the ALB and its clients. Outdated security policies may have known SSL/TLS flaws that an adversary can use to intercept HTTPS connections between the ALB and its clients.