CVE-2014-3566
Global infos:
The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, uses nondeterministic CBC padding, which makes it easier for man-in-the-middle attackers to obtain cleartext data via a padding-oracle attack, aka the "POODLE" issue.
CVE Status: Modified
References:
Metrics:
| Attribute | Value |
|---|---|
| Attack Complexity | HIGH |
| Attack Vector | NETWORK |
| Availability Impact | NONE |
| Base Score | 3.4 |
| Base Severity | LOW |
| Confidentiality Impact | LOW |
| Integrity Impact | NONE |
| Privileges Required | NONE |
| Scope | CHANGED |
| User Interaction | REQUIRED |
| Vector String | CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N |
| Exploitability Score | 1.6 |
| Impact Score | 1.4 |
| Source | [email protected] |
| Type | Primary |