CyberRota Analysis
AI-GeneratedOpenSSL versions prior to 1.4.9 are vulnerable to improper sanitization of terminal control characters in file metadata, which can be exploited by attackers to manipulate terminal output and present misleading verification information. While the CVSS score is low, organizations using affected versions should prioritize patching to mitigate potential user deception and maintain the integrity of their cryptographic operations. This is particularly relevant for environments where OpenSSL is used for secure communications or file handling.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
openssl_encrypt versions before 1.4.9 fail to sanitize terminal control characters in file metadata printed by the info command. Attackers can craft malicious files containing escape sequences to repaint terminal output and forge verification information displayed to users.
Related CVEs
Other vulnerabilities affecting the same vendor(s)