SSL has been the matter of focus these pasts months and we cant just say it’s finished. Another vulnerability, this time discovered by Google Research Team is SSL 3.0. It’s still being used throughout the Web,While SSL 3.0 has already been around for almost 15 years, and nearly every browser supports it. The POODLE vulnerability is a weakness in version 3 of the SSL protocol that allows an attacker in a man-in-the-middle context to decipher the plain text content of an SSLv3 encrypted message. POODLE as an acronym for Padding Oracle On Downgraded Legacy Encryption, researchers have shown that because of the widespread support for this, an attacker can assume it will be easy to find a situation where an SSLv3 connection can be forced and put to use for capturing private data or cookies. For more info about Vulnerability Discovered in SSL 3.0 feel free visit:- https://www.clickittech.com/news/vulnerability-in-ssl-3
|
|
