CyberRota Analysis
AI-GeneratedOpenSSL versions prior to 1.4.9 are vulnerable due to the storage of an unkeyed SHA-256 hash of the plaintext in the cleartext file header metadata, allowing attackers to read this hash without requiring the password. This vulnerability enables offline confirmation of guessed plaintexts and the ability to fingerprint identical plaintexts across different encrypted files. Organizations using affected OpenSSL versions should prioritize patching to mitigate the risk of data exposure and unauthorized access.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
openssl_encrypt versions before 1.4.9 store an unkeyed SHA-256 hash of the plaintext in the cleartext file header metadata. Attackers can read this hash without the password to confirm guessed plaintexts offline or fingerprint identical plaintexts across separately-encrypted files.
Related CVEs
Other vulnerabilities affecting the same vendor(s)