Security Advisory
CVE-2015-2774
5.9
MEDIUM
Vulnerability Description
Erlang/OTP before 18.0-rc1 does not properly check CBC padding bytes when terminating connections, which makes it easier for man-in-the-middle attackers to obtain cleartext data via a padding-oracle attack, a variant of CVE-2014-3566 (aka POODLE).
Published Date
April 7, 2016
Official Source
NIST NVD Advisory