[CVE-2026-81688] openssl_encrypt versions before 1.4.9 store an unkeyed SHA-256 hash of the plaintext in the cleartex…

Descripción técnica

openssl_encrypt versions before 1.4.9 store an unkeyed SHA-256 hash of the plaintext in the cleartext file header metadata. Attackers can read this hash without the password to confirm guessed plaintexts offline or fingerprint identical plaintexts across separately-encrypted files.

Puntuación CVSS

Score: 7.5/10 — Severidad: HIGH — Estado NIST: Received

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Debilidades (CWE)

CWE-311

Fuente oficial

Publicado en NIST NVD.