Description
OpenSSL before 0.9.8zc, 1.0.0 before 1.0.0o, and 1.0.1 before 1.0.1j does not properly enforce the no-ssl3 build option, which allows remote attackers to bypass intended access restrictions via an SSL 3.0 handshake, related to s23_clnt.c and s23_srvr.c.
Remediation
References
Related Vulnerabilities
WordPress Plugin Auto Prune Posts Cross-Site Request Forgery (1.8.0)
WordPress 4.3.x Multiple Vulnerabilities (4.3 - 4.3.19)
phpMyAdmin 7PK - Security Features Vulnerability (CVE-2015-7873)
Masa CMS Incorrect Authorization Vulnerability (CVE-2022-47002)
WordPress Plugin Locations Cross-Site Request Forgery (3.2.1)