Slack · Report #375097
The POODLE attack (SSLv3 supported) at status.slack.com
Validstatus
mediumseverity
44upvotes
28 Nov 2018disclosed
Summary
@cryptographer found that for some regions, status.slack.com supported an outdated cipher suite, which we've since updated. Thanks @cryptographer!
nmap -sV --version-light --script ssl-poodle -p 443 IP
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.