diff --git a/cpp/ql/src/Likely Bugs/Protocols/TlsSettingsMisconfiguration.qhelp b/cpp/ql/src/Likely Bugs/Protocols/TlsSettingsMisconfiguration.qhelp index b8f3f9d3be3..03288c39a71 100644 --- a/cpp/ql/src/Likely Bugs/Protocols/TlsSettingsMisconfiguration.qhelp +++ b/cpp/ql/src/Likely Bugs/Protocols/TlsSettingsMisconfiguration.qhelp @@ -3,7 +3,7 @@ "qhelp.dtd"> -

Using the TLS or SSLv23 protocol from the boost::asio library, but not disabling deprecated protocols or disabling minimum-recommended protocols.

+

Using the TLS or SSLv23 protocol from the boost::asio library, but not disabling deprecated protocols may expose the software to known vulnerabilities or permit weak encryption algorithms to be used. Disabling the minimum-recommended protocols is also flagged.