According to a Qualys Blog, POODLE can now be used against TLS (all versions). I've read separately that in order to execute POODLE against TLS, the server must skip a step in validating the padding. Most sources name two manufacturers which skip this step.
How would an administrator verify or fix their implementation so that they are not vulnerable? (for example, if the company runs their own dedicated web server)