FormAssembly · Report #220116

SSLv3 Poodle Vulnerability

Validstatus

highseverity

20upvotes

24 Nov 2018disclosed

How it was found

Hey there, I tested against POODLE MITM and enterprisedemo.formassembly.com is vulnerable, I simply went into terminal and used this command "openssl s_client -connect enterprisedemo.formassembly.com:443 -ssl3"

POC

How to fix: Disable SSLv3

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original