BEAST (Browser Exploit Against SSL/TLS) is a security vulnerability disclosed in 2011 that exploited weaknesses in the cipher block chaining (CBC) mode implementation in SSL 3.0 and TLS 1.0. This attack allowed attackers to decrypt encrypted HTTPS traffic by exploiting predictable initialization vectors in the CBC encryption mode, potentially exposing sensitive information like session cookies and authentication credentials.
Security Vulnerabilities
Known vulnerabilities and attack vectors affecting SSL/TLS.
2
SSL Terms
2
Letters Covered
Jump to letter:
B 1 term
P 1 term
POODLE (Padding Oracle On Downgraded Legacy Encryption) is a critical security vulnerability discovered in 2014 that exploits weaknesses in SSL 3.0''s padding validation mechanism. This attack allows attackers to decrypt encrypted HTTPS traffic by forcing connections to downgrade from modern TLS versions to the vulnerable SSL 3.0 protocol, then exploiting the protocol''s flawed padding implementation.