Protocol: TLS ChangeCipherSpec Injection Vulnerability¶

Identifier: issue_ssl_ccs_injection_vulnerability

Scanner(s) Support¶

Description¶

A vulnerable TLS implementation can accept an injected ChangeCipherSpec message before key exchange.

How we test: We send an early ChangeCipherSpec record and evaluate the server response.

References:

• https://nvd.nist.gov/vuln/detail/CVE-2014-0224

Configuration¶

Example¶

Example configuration:

---
security_tests:
  issue_ssl_ccs_injection_vulnerability:
    skip: false

Reference¶

skip¶

Type : boolean

Skip the test if true.