Overview
A security scan or vulnerability assessment flags the ROBOT vulnerability in the environment where Password Secure is running. This article answers whether Password Secure itself is affected and explains what you need to check in your environment.
Key Points
Password Secure and ROBOT
Password Secure is not directly affected by the ROBOT vulnerability. The vulnerability affects specific cyphers in the operating system's SSL/TLS protocol, not the application itself. No update or patch for Password Secure is required.
What you should do in your environment
To resolve the scan finding, disable the insecure cyphers at the operating system level of the affected server. This can be done, for example, using PowerShell with the Disable-TlsCipherSuite command or with tools such as IISCrypto.
Note: If you need a statement for your own security or compliance assessment, you can quote the answer above. For further questions, create a support ticket.