Another Heartbleed-like vulnerability has been discovered in the widely used Secure Sockets Layer (SSL) 3.0 cryptographic protocol that could allow an attacker to decrypt contents of encrypted connections to websites. The flaw affects any product that follows the Secure layer version 3, including Chrome, Firefox, and Internet Explorer. The POODLE attack can force a connection to “fallback” to SSL 3.0, where it is then possible to steal cookies, which are meant to store personal data, website preferences or passwords.
Source: https://thehackernews.com/2014/10/poodle-ssl-30-attack-exploits-widely_14.html

