POODLE SSLv3 Protocol CBC ciphers Information Disclosure Vulnerability

  1. Network Vulnerabilities
  2. General
  3. POODLE SSLv3 Protocol CBC ciphers Information Disclosure Vulnerability
Summary
This host is installed with OpenSSL and is prone to information disclosure vulnerability.
Impact
Successful exploitation will allow a man-in-the-middle attackers gain access to the plain text data stream. Impact Level: Application
Solution
Vendor released a patch to address this vulnerabiliy, For updates contact vendor or refer to https://www.openssl.org NOTE: The only correct way to fix POODLE is to disable SSL v3.0
Insight
The flaw is due to the block cipher padding not being deterministic and not covered by the Message Authentication Code
Affected
OpenSSL through 1.0.1i
Detection
Send a SSLv3 request and check the response.
References
Updated on 2015-03-25
Severity
Medium Severity
Classification
Related Vulnerabilities