{
  "slug": "tls-misconfiguration",
  "url": "https://library.infinity8labs.com/tls-misconfiguration/",
  "title": "TLS misconfiguration",
  "short": "TLS misconfiguration",
  "aliases": [
    "Weak TLS configuration",
    "Obsolete TLS enabled",
    "TLS 1.0 or TLS 1.1 enabled",
    "Weak cipher suites"
  ],
  "summary": "TLS misconfiguration weakens the protection of data in transit through obsolete protocols, weak algorithms, invalid certificates, or inconsistent HTTPS enforcement. Attackers may intercept, downgrade, or impersonate connections.",
  "cwe": [
    "CWE-326",
    "CWE-327"
  ],
  "owasp": "A02:2021 Cryptographic Failures",
  "typical_severity": {
    "min": "low",
    "max": "high"
  },
  "updated": "2026-10-15",
  "references": [
    {
      "title": "CWE-326: Inadequate Encryption Strength",
      "url": "https://cwe.mitre.org/data/definitions/326.html"
    },
    {
      "title": "CWE-327: Use of a Broken or Risky Cryptographic Algorithm",
      "url": "https://cwe.mitre.org/data/definitions/327.html"
    },
    {
      "title": "RFC 8996: Deprecating TLS 1.0 and TLS 1.1",
      "url": "https://www.rfc-editor.org/rfc/rfc8996.html"
    },
    {
      "title": "NIST SP 800-52 Rev. 2: Guidelines for TLS Implementations",
      "url": "https://csrc.nist.gov/pubs/sp/800/52/r2/final"
    },
    {
      "title": "OWASP Transport Layer Security Cheat Sheet",
      "url": "https://cheatsheetseries.owasp.org/cheatsheets/Transport_Layer_Security_Cheat_Sheet.html"
    },
    {
      "title": "OWASP Top 10 A02:2021 Cryptographic Failures",
      "url": "https://owasp.org/Top10/A02_2021-Cryptographic_Failures/"
    }
  ],
  "sections": [
    "https://library.infinity8labs.com/tls-misconfiguration/#overview",
    "https://library.infinity8labs.com/tls-misconfiguration/#impact",
    "https://library.infinity8labs.com/tls-misconfiguration/#examples",
    "https://library.infinity8labs.com/tls-misconfiguration/#remediation",
    "https://library.infinity8labs.com/tls-misconfiguration/#testing",
    "https://library.infinity8labs.com/tls-misconfiguration/#references"
  ]
}