CyberRota Analysis
AI-GeneratedOpenSSL versions prior to 1.4.0 are vulnerable to an information disclosure flaw in the /ready endpoint, which exposes detailed database exception strings to unauthenticated users. This vulnerability allows attackers to exploit database errors to retrieve sensitive information such as hostnames, IP addresses, connection parameters, and potentially credentials. Organizations using affected versions of OpenSSL should prioritize patching to mitigate the risk of data leakage.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
openssl_encrypt versions before 1.4.0 contain an information disclosure vulnerability in the /ready endpoint that returns full database exception strings to unauthenticated callers. Attackers can trigger database errors to extract sensitive information including hostnames, IP addresses, connection parameters, and potentially credentials from exception messages.
Related CVEs
Other vulnerabilities affecting the same vendor(s)