Security News > 2015 > April > MySQL Bug Can Strip SSL Protection From Connections (Threatpost)

Researchers have identified a serious vulnerability in some versions of Oracle’s MySQL database product that allows an attacker to strip SSL/TLS connections of their security wrapping transparently. The vulnerability is the result of the way that an option in MySQL handles requests for secure connections. Researchers at Duo Security discovered the bug after noticing some […]

News URL

http://threatpost.com/mysql-bug-can-strip-ssl-protection-from-connections/112513