About this tag
The tag https traffic on WindowsForum.com covers discussions about securing web communications, particularly focusing on vulnerabilities that affect encrypted HTTPS connections. A key topic is the SSL 3.0 vulnerability (CVE-2014-3566, known as POODLE) which allows decryption of encrypted SSL 3.0 traffic, impacting HTTPS traffic since browsers are the primary attack vector. This affects all web traffic served via HTTPS or mixed HTTP/HTTPS content. The tag includes Microsoft security advisories and updates related to this vulnerability, emphasizing the importance of disabling SSL 3.0 and using more secure protocols like TLS to protect HTTPS traffic from information disclosure attacks.
-
3009008 - Vulnerability in SSL 3.0 Could Allow Information Disclosure - Version: 1.0
Revision Note: V1.0 (October 14, 2014): Advisory published Summary: Microsoft is aware of detailed information that has been published describing a new method to exploit a vulnerability in SSL 3.0, affecting the Windows operating system. This vulnerability affects the protocol itself and is not...- News
- Thread
- attack vector browser security decryption encryption https traffic information disclosure microsoft mixed content protocol vulnerabilities risk assessment security advisory ssl vulnerability
- Replies: 0
- Forum: Security Alerts