Blogs

SSL v3 “Poodle” Vulnerability

By 18 November 2014No Comments

18 November 2014

The “SSLV3 Poodle” security vulnerability has recently surfaced, allowing a flaw in SSLv3 to be exploited.  The exploit can be used as the basis for a man-in-the-middle attack, allowing the attacker to capture and decrypt secure data communications between browser and web server.  Further information on the vulnerability can be found at http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-3566.

Risk is low to our products (including Location Centre) since we don’t hold sensitive personal or financial information and exploiting requires a fair bit of work.  thinkWhere have, however, taken steps to mitigate any risks to customers using the secured https connections.  For those accessing sites using https, we have disabled SSLv3 for all LIVE sites.  This is the recommended solution for the issues as all modern browsers support the newer TLS 1.0 specification.  This does mean that any customers using Internet Explorer 6.0 or lower will be no longer be able to access the products via https.

If you are a customer and have any questions, please raise a helpdesk call, email us at support@thinkwhere.com or call the thinkWhere support team directly on 01786 476090.

[clear] [gap size=”20px”]

[line]
Contacts

Editorial Enquiries – Robert Peel (PR), +44(0)1666 823306, robert@market-it.co.uk
Reader Enquiries – Fiona Thomas, Business Development Manager, +44(0)1786 476060, Fiona.Thomas@thinkwhere.com

[line]
Notes to Editors

thinkWhere provides an online platform for storing, sharing and using maps and geographic data. Utilising Open Source Geographic Information System (GIS) technologies, thinkWhere has developed cloud-based software applications and tools, backed by a wide range of Open GIS implementation, consultancy and training services.

Originally Forth Valley GIS, the company started in 1993 providing GIS services to Central Regional Council before, following local government reorganisation, developing a shared GIS service for three unitary authorities. In 2007 the company began operating as an arms-length commercial operation and rebranded as thinkWhere in 2007.

Based in the historic city of Stirling, Scotland, with customers across the UK and worldwide, thinkWhere pioneered the development of web-based platforms for collaborative GIS products and services. The company has a 10 year proven track record of delivering solutions at local, regional and national levels in the UK public and commercial sectors. For further information visit www.thinkwhere.com