HexBrain

Eternal · Report #201520

test.zba.se is vulnerable to SSL POODLE

Validstatus
mediumseverity
15upvotes
27 Feb 2017disclosed

How it was found

test.zba.se is vulnerable to ssl poodle Steps to reproduce: 1.nmap -sV --version-light --script ssl-poodle -p 443 example.com

2.curl -v3 -X HEAD https://www.example.com<br> 3.or script given at https://access.redhat.com/node/1232123/40/0<br> command: ./poodle.sh example.com Result from these all 3 commands proves that test.zba.se is vulnerable to ssl poodle issue.

Attack scenario: It was discovered by researchers at Google itself and announced on Google’s online security blog.<br> read here for more information and attack scenario:<br> https://security.googleblog.com/2014/10/this-poodle-bites-exploiting-ssl-30.html.

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original