Data protection

ELB allows insecure SSL protocols

Risk Level

Informational (4)



An ELB security policy is using insecure and/or outdated versions of the SSL protocol. Such versions often have exploitable flaws and/or vulnerabilities, which can allow malicious actors to intercept connections and potentially even decipher encrypted text.
  • Recommended Mitigation

    Ensure that your ELB security policies always use the latest versions of the SSL protocol.