Office 365 - Poodle Vunerabilties

CZaloba — Fri, 15 Sep 2017 21:09:32 GMT

Threat ID - 37144

Question or insight about Microsoft practices with not hardening against poodle.

Why am I still getting alerts for these vulnerabilities, is it because I don't have proper SSL forward proxy yet enabled? Or is it because my Office 365 tenancy is hosted out of UK which is often 5 steps backwards in ramping up and fixing vulns? I have been outside the sysadmin wintel space for nearly a decade is there a tenant setting that my teams operaters can do to ensure Crypto at the TLS level is greater than 1.0 ? Maybe its that way since TLS 1.0 is very popular interms of the footprint of devices in that region of the world, who knows.

Thoughts,

I mean really -

CVE-2014-8730

since 2014

topic Office 365 - Poodle Vunerabilties in Advanced Threat Prevention Discussions

Office 365 - Poodle Vunerabilties