I read about PODDLE attack which downgrades the TLS version to SSL 3.0 to exploit CBC padding oracle attack. I looked at the specs for TLS 1.1
And found CBC is still used in its ciphersuites. Why is POODLE needs to downgrade to SSL 3? Can't the POODLE attack works by downgrading to TLS 1 or TLS 1.1? Is the CBC implementation in SSL 3 different than that in TLS 1 and TLS 1.1?