search

GSA / 889-tool

Web service for determining 889 compliance of vendors
1 stars 0 forks source link

Weak Ciphers Enabled #154

Open JennaySDavis opened 6 months ago

JennaySDavis commented 6 months ago

Issue Level: Moderate First Discovered: 1/11/2020 Remediation Date: 4/10/2020

JennaySDavis commented 6 months ago

A ticket was previously created to address this issue. https://github.com/GSA/smartpay-website/issues/281

JennaySDavis commented 5 months ago

The following WebApp Scan finding was from the decommissioned SPCS; this finding is not valid with the new SPCS.

JennaySDavis commented 4 months ago

We are waiting on Tri and the security team to remove this issue from the POAM before closing the ticket.

JennaySDavis commented 1 week ago

Based on cloud.gov documentation; This is guidance from cloud.gov https://cloud.gov/docs/compliance/domain-standards/ making this issue platform-dependent. Dan stated that there are no application changes that can be made on our side, requesting that it be removed. Dan entered a GSA Generic Request requesting this be removed based on it being a platform dependency.

This issue has been resolved and is no longer listed on the June Vulnerability Scan.