VulnerabilitiesSSL/TLS Certificate is Vulnerable to Heartbleed
Platform(s)
Compliance Frameworks
- CCM-CSA ,
- cis_8 ,
- Data Security Posture Management (DSPM) Best Practices ,
- HITRUST ,
- iso_27001_2022 ,
- iso_27002_2022 ,
- New Zealand Information Security Manual ,
- NIST 800-171 ,
- NIST 800-53 ,
- Orca Best Practices
Description
Ensure that none of the server certificates managed by AWS IAM were compromised by the Heartbleed bug, meaning that none of the SSL/TLS certificates were uploaded before April 1st 2014, when the security bug was publicly disclosed. Heartbleed is a critical bug in the OpenSSL library that allows attackers to eavesdrop on SSL/TLS encrypted communications, steal sensitive or confidential data from services and users and be able to impersonate services and users
Demo the Orca Platform
In just 10 minutes, you’ll see how Orca Security can revolutionize your cloud security strategy. Watch a recorded demo from a cloud security expert now.