HexBrain

Slack · Report #375097

The POODLE attack (SSLv3 supported) at status.slack.com

Validstatus
mediumseverity
44upvotes
28 Nov 2018disclosed

Summary

@cryptographer found that for some regions, status.slack.com supported an outdated cipher suite, which we've since updated. Thanks @cryptographer!

nmap -sV --version-light --script ssl-poodle -p 443 IP

How it was found

The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original