Lucene search

K
opensslOpenSSLOPENSSL:CVE-2022-1292
HistoryMay 03, 2022 - 12:00 a.m.

Vulnerability in OpenSSL CVE-2022-1292

2022-05-0300:00:00
www.openssl.org
253

10 High

AI Score

Confidence

High

0.106 Low

EPSS

Percentile

95.0%

The c_rehash script does not properly sanitise shell metacharacters to prevent command injection. This script is distributed by some operating systems in a manner where it is automatically executed. On such operating systems, an attacker could execute arbitrary commands with the privileges of the script. Use of the c_rehash script is considered obsolete and should be replaced by the OpenSSL rehash command line tool.