CyberRota Analysis
AI-GeneratedOpenSSL versions prior to 1.4.9 are vulnerable due to the use of unsalted HKDF-SHA256 or bare SHA-256 for deriving the remote-pepper wrap key, which results in identical keys for all users and files. This flaw allows attackers with access to wrapped pepper blobs to create a precomputed dictionary table, enabling rapid offline password guessing across multiple accounts. Organizations utilizing affected OpenSSL versions should prioritize patching to mitigate the risk of credential compromise.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
openssl_encrypt versions before 1.4.9 derive the remote-pepper wrap key using unsalted HKDF-SHA256 or bare SHA-256 of the password, allowing identical keys across all users and files. Attackers with access to wrapped pepper blobs can precompute a single dictionary table and perform fleet-wide offline password guessing at hardware speed to recover user passwords.
Related CVEs
Other vulnerabilities affecting the same vendor(s)