SSL Medium Strength Cipher Suites Supported (SWEET32)

Vault
1

Hi,
We are facing vulnerability in our vault linux server (SSL Medium Strength Cipher Suites Supported (SWEET32) ).We are not seeing any 3DES cipher suites used in our vault but the below vulnerability is occurred and not able to fix it. Vault is using TLS 1.2 and higher version.

[ ~]# netstat -tulnp
Active Internet connections (only servers)
Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name
tcp 0 0 0.0.0.0:8200 0.0.0.0:* LISTEN 3050065/vault

[~]# ps 3050065
PID TTY STAT TIME COMMAND
3050065 ? Ssl 187:46 /usr/bin/vault server -config=/etc/vault.d/vault.hcl

      Can anyone guide us how can we resolve this issue?

Thanks and Regards,
Rajesh Dey

2

Does this help?

3

we have already checked this link and vault is using the high cipher suites. Should we need to add the parameters Cipher suites and Min TLS version in the Vault HCL configuration file?

will that solve SSL vulnerability?