pragati.axisbank.co.in

[anand-bhat]

Organization: Axis Bank
Type: Private-sector bank

Host: pragati.axisbank.co.in
Function: ?

https://www.ssllabs.com/ssltest/analyze.html?d=pragati.axisbank.co.in

Grade: F

Issues:

1. Heartbleed
2. CVE-2014-0224
3. CVE-2016-2107
4. POODLE (SSL)
5. Weak DH
6. Incomplete chain
7. RC4
8. SSLv3
9. No FS

All IP addresses that use this certificate and are vulnerable to Heartbleed:

115.112.85.98
2403:0:100:1c:0:0:0:152
36.255.28.98
202.191.184.98

[anand-bhat]

When contacted for a security contact via DM (@axisbank) on 2016-08-29, was asked to provide details via a DM. Details sent on 2016-08-30 and acknowledged ("Hi, thanks for sharing the details. We’ve shared the same with the relevant team.")

[anand-bhat]

Contacted CERT-In via incident@cert-in.org.in on 2016-10-04. Provided evidence on 2016-10-05.

[anand-bhat]

Reminded on 2016-11-07.