[STORM-640] Storm UI vulnerable to poodle attack

• Type: Bug
• Status: Resolved
• Priority: Trivial
• Resolution: Fixed
• Fix Version/s: 0.10.0
• Component/s: storm-core
• Assignee: Harsha
• Reporter: Harsha
• Created: 30/Jan/15 18:49
• Updated: 05/Oct/15 01:08
• Resolved: 23/Feb/15 17:55

Description

More info on this page http://en.wikipedia.org/wiki/POODLE .
Steps to verify
1 Enable storm ui or logviewer to listen in SSL
2. openssl s_client -connect host:port | grep Protocol
3. If SSLv3 shows up you have the vulnerability, TLS protocol versions are OK.