Eliminate the "TLS Server Supports TLS version 1.0" vulnerability from my PAM Server?

Products

• CA Privileged Access Manager - Cloakware Password Authority (PA)
• CA Privileged Access Manager (PAM)

Issue/Introduction

After running a vulnerability scanning tool, the resulting report shows that my PAM server is affected by the "TLS Server Supports TLS version 1.0" vulnerability.

Cause

PAM was configured to allow TLS 1.0 and 1.1 connections.

Resolution

Open the PAM Client and verify if the setting 'TLS v1.0/1.1 Connection Allowed' is Enabled or Disabled in the 'Access' tab of the 'Configuration / Security / Access" pane.

After disabling it and rerunning the test the "TLS Server Supports TLS version 1.0" vulnerability did no longer appear.