OpenVAS did not flag SSL issues and TLS version detection

Building from Source and Advanced Topics
1

Hi,

VT scan did not pick up vulnerability related to TLS and Cipher detection (Sweet32)

OpenVAS did not flag SSL issues (e.g., medium strength cipher suites SWEET32 supported), and TLS version detection (e.g., TLS 1.1, TLS 1.0).

Version Used: Greenbone Community Edition 22.4.0

We require assistance why this is not detected.

Thank you

Regards,
Roy

2

Hi Roy, and welcome to the Greenbone Community Forum. :slight_smile:

  • Is the target host being scanned? If it’s not responding to the Host Alive Detection, it may be falsely seen as offline, which will lead to no VTs being used.
  • Is the vulnerable port on the target host included in the port list you’re using?
1 Like
3

Hi Roy,

You might be experiencing the same issue as I discussed in
“Report Vulnerable Cipher Suites for HTTPS” VT not reporting in GSEv22.4.
Unfortunately, there has been no release of openvas-scanner since the PR were merged.

4 Likes