Monday, October 20, 2014

Impact Assessment for SSLv3 Vulnerability - POODLE attack [feedly]



----
Impact Assessment for SSLv3 Vulnerability - POODLE attack
// Puppet Labs

Yesterday, an OpenSSL vulnerability was announced. It is nicknamed POODLE (Padding Oracle On Downgraded Legacy Encryption, CVE-2014-3566) and was discovered by researchers at Google. Of course, SSL is a heavily utilized transport mechanism in many of our software components. This post provides our impact assessment and recommended actions.


----

Shared via my feedly reader


Sent from my iPhone

No comments:

Post a Comment