What is the name of the domain?
elaweb
What is the issue you’re encountering
Recent vulnerability scan has failed
What steps have you taken to resolve the issue?
We have recently setup a cloudflare Pro account and it’s working great to regulate traffic to the site.
However, we are required to have a regular PCI compliance audit. Part of this is an automatic scan by Security Metrics. The most recent vulnerability scan has failed with the error:
TCP/IP Predictable ISN (Initial Sequence Number) Generation Weakness
It is possible to predict TCP/IP Initial Sequence Numbers for the remote host.
The remote host has predictable TCP sequence numbers. An attacker may use this flaw to establish spoofed TCP connections to this host.
Does anyone know how I can resolve this issue? I have searched forums and support documentation.
If I pause the cloudflare service, there are no problems reported and the scan passes.
Was the site working with SSL prior to adding it to Cloudflare?
Yes
What is the current SSL/TLS setting?
Full (strict)