The SSL protocol 3.0 design error, uses nondeterministic CBC padding, which makes it easier for man-in-the-middle attacks (POODLE) Additional information: (CVE-2014-3566) | An unauthorised user who can take a man-in-the-middle (MitM) position can exploit this vulnerability and gain access to encrypted communication between a client and server. | It is recommended to disable SSLv3 support to avoid this vulnerability. |
↧
Need to Disable SSL V3 - How can I disable it? Is it required?
↧