I read the CVE-2015-3152 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3152) named BACKRONYM (http://backronym.fail/), and what I understood (ELI5 style) was the following:
- Attacker sniffs the network looking for packages from a MySQL client to a MySQL server.
- Attacker replies to MySQL client tricking it into think the MySQL server is replying "hey, I don't support SLL, send me thing in plain text please!".
- MySQL client resends the package, but now in plain text.
- Attacker is able to read your username password in plain text.
This basically means that I would only need to update the server which is the MySQL client and configure it to enforce SSL, is this conclusion right?
PS: Please assume I have 2 different servers on different networks and Server#1 has the MySQL master/server and the Server#2 has the MySQL slave/client which connects to Server#1 to query stuff. Also I would only care about fixing this vulnerability (so if updating the client fixes the issue, I'm fine).