Skip to content

Protocol: DROWN-Vulnerable SSLv2 Service

Identifier: issue_ssl_drown_vulnerability

Scanner Support

GraphQL Scanner REST Scanner WebApp Scanner ASM Scanner Automated Pentest

Description

SSLv2 support can enable the DROWN cross-protocol decryption attack. How we test: We probe the endpoint for SSLv2 support. References:

Configuration

Example

Example configuration:

---
security_tests:
  issue_ssl_drown_vulnerability:
    skip: false

Reference

skip

Type: boolean

Skip the test if true.