Hi Team,

In java, I am getting CWE 757 less secure algorithm during negotiation('Algorithm Downgrade') in java. Details are,

Vulnerable Parameter:  TLSv1.2 cipher TLS_RSA_WITH_AES_128_CBC_SHA

TLSv1.2 cipher TLS_RSA_WITH_AES_256_GCM_SHA384

TLSv1.2 cipher TLS_RSA_WITH_AES_256_CBC_SHA256

TLSv1.2 cipher TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384

TLSv1.2 cipher TLS_RSA_WITH_AES_128_CBC_SHA256

TLSv1.2 cipher TLS_RSA_WITH_AES_128_GCM_SHA256

TLSv1.2 cipher TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA

TLSv1.2 cipher TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256

with respect original values are,

Original Value: TLSv1.2:TLS_RSA_WITH_AES_128_CBC_SHA

TLSv1.2:TLS_RSA_WITH_AES_256_GCM_SHA384

TLSv1.2:TLS_RSA_WITH_AES_256_CBC_SHA256

TLSv1.2:TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384

TLSv1.2:TLS_RSA_WITH_AES_128_CBC_SHA256

TLSv1.2:TLS_RSA_WITH_AES_128_GCM_SHA256

TLSv1.2:TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA

TLSv1.2:TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256

I am unable to understand, can anyone help me with example for better understand.

Regards,

Giri