POODLE and The Curse of Backwards Compatibility

Summary: Cisco Talos described CVE-2014-3566, known as POODLE, a cryptographic weakness in SSL 3.0 that lets an attacker modify the padding bytes in SSL packets and replay altered packets to recover message bytes one at a time, including cookies used to authenticate https sessions. Because the current TLS 1.2 standard requires support for earlier versions down to SSL 3.0, the flaw can be used against TLS implementations when traffic falls back to the old protocol, though exploitation requires the attacker to intercept communications, such as in a man-in-the-middle attack.
Bottom line: The attack recovers session cookies byte by byte, so an intercepted https session can yield the credentials that authenticate it - and Talos notes browsers are likely to keep backwards compatibility and should be considered vulnerable. That makes public wi-fi, where actors may capture or interfere with traffic, the concrete setting where this matters.

Read the original at Cisco Talos ↗

Topics: Vulnerabilities & Patching
Mentions: CVE-2014-3566
Related: SSL 3 is dead, killed by the POODLE attack | Qualys Cyber Risks ·
Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026
U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026