SecBoard
Zurück zur CVE-Übersicht

CVE-2014-3566

LOW(3.4)

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N

Risk Signal Score37/100 — MITTEL
  • EPSS 94% — sehr wahrscheinlich ausgenutzt

EPSS-Score

94%

Exploit-Wahrscheinlichkeit (30 Tage)

CVSS Score

3.4

Technische Schwere

Beschreibung

The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, uses nondeterministic CBC padding, which makes it easier for man-in-the-middle attackers to obtain cleartext data via a padding-oracle attack, aka the "POODLE" issue.

Referenzen