PADDING-ORACLE-Vulnerability-IMAPS/EN

Check for Padding Oracle Vulnerability

If the result is positive, there is no need for further action. If the result is negative, please read the following instructions.

Result positive	Not vulnerable to Padding Oracle Attacks.
Result negativ	Vulnerable to Padding Oracle Attacks.
Description	The server is vulnerable to a Padding-Oracle attack, which allows an attacker to decrypt the communication.
Background	The Padding-Oracle Attack can be used by attackers to attack secured connections. It establishes a connection to the server and sends very specially prepared encrypted messages. These messages are almost correctly encrypted, but have errors in critical positions. A server that receives such a message must always reject these messages in the same way. An attacker evaluates the error messages sent and can use this information to partially decrypt the connection to the server, making the connection insecure.
Consequence	The server is vulnerable to an implementation vulnerability that allows an attacker to decrypt the communication.
Solution/Tips	If vulnerability has been reported, immediately install an update for your TLS implementation on your server.