OpenVAS did not flag SSL issues and TLS version detection


VT scan did not pick up vulnerability related to TLS and Cipher detection (Sweet32)

OpenVAS did not flag SSL issues (e.g., medium strength cipher suites SWEET32 supported), and TLS version detection (e.g., TLS 1.1, TLS 1.0).

Version Used: Greenbone Community Edition 22.4.0

We require assistance why this is not detected.

Thank you


Hi Roy, and welcome to the Greenbone Community Forum. :slight_smile:

  • Is the target host being scanned? If it’s not responding to the Host Alive Detection, it may be falsely seen as offline, which will lead to no VTs being used.
  • Is the vulnerable port on the target host included in the port list you’re using?
1 Like

Hi Roy,

You might be experiencing the same issue as I discussed in
“Report Vulnerable Cipher Suites for HTTPS” VT not reporting in GSEv22.4
Unfortunately, there has been no release of openvas-scanner since the PR were merged.