The POODLE attack takes advantage of a design weakness in SSLv3, an obsolete piece of encryption software. The vulnerability gives attackers a way to decrypt encrypted communications between a browser and a Web server essentially one byte at a time using repeated browser requests. Theoretically, the vulnerability should at least be a nonissue for most Internet users because it became obsolete some 15 years ago. Many legacy Web servers still support SSL v3 because many Web users still use old Internet Explorer 6 browsers. The attack shows how attackers could essentially trick a client browser and Web server into this dance.”]
Source: https://securityintelligence.com/news/poodle-attack-packs-bite/