CyberRota Analysis
AI-GeneratedOpenSSL versions prior to 1.4.0 are vulnerable as they expose passwords provided through the --password command-line argument in process listings, allowing any system user to access sensitive information. This could lead to unauthorized access to encrypted data or keystores, posing a risk to data confidentiality. Organizations using affected versions should prioritize updating to mitigate the risk of password exposure.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
openssl_encrypt versions before 1.4.0 expose passwords passed via the --password CLI argument in process listings accessible to all system users. Attackers can read process arguments through ps aux or /proc/[pid]/cmdline to retrieve plaintext passwords and keystore passwords.
Related CVEs
Other vulnerabilities affecting the same vendor(s)