SSL security vulnerabilities

Poodle is a "Man In The Middle" (MITM) vulnerability which needs to be primarily fixed server side. An attacker can trick the server into downgrading the encryption protocol used to communicate. The servers should be configured to disallow TLS fallback, or to disable SSLv3 as a valid protocol.

If Tomcat has been configured with SSL support, you should add the following to the connector description in the <TDC_HOME>\TalendDataCatalog\tomcat\conf\server.xml .

sslEnabledProtocols="TLSv1.2,TLSv1.1,TLSv1"