Search code examples
securityencryptionregistry

Weak Ciphers Detected

After running a vulnerability scan on my application, the Netsparker returned a Weak Ciphers issue.

The resolution tells me to modify the registry like so:

• click Run, type regedt32 or type regedit, and then click OK.

• In Registry Editor, locate the following registry key : HKLM\SYSTEM\CurrentControlSet\Control\SecurityProviders

• Set "Enabled" DWORD to "0x0" for the following registry keys:

SCHANNEL\Ciphers\DES 56/56

SCHANNEL\Ciphers\RC4 64/128

SCHANNEL\Ciphers\RC4 40/128

SCHANNEL\Ciphers\RC2 56/128

SCHANNEL\Ciphers\RC2 40/128

SCHANNEL\Ciphers\NULL

SCHANNEL\Hashes\MD5

But when I go to Ciphers, all I see is "Default".

Am I missing something? How to correct this problem?

Solution

  • Most of the time configuration settings have default values; if they are not present you will have to create them.