I always thought that if a server supports SSLv3 and CBC ciphers, then it is vulnerable to POODLE. But it looks like that is not the case.
For example, for Google.com, SSL Labs says that the SSL POODLE attack is mitigated even though it supports CBC ciphers with SSLv3. On further investigation, I found that if SSL Labs detects that a server prefers RC4 over CBC (SSL 3: 0x5 is mentioned next to SSL POODLE result).
Now MITM can only provide CBC ciphers to Google.com, then it will only choose CBC (out of what I provide), and it will still be vulnerable to POODLE. But then why does SSL Labs says it is not?