Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
veracodeVeracode Vulnerability DatabaseVERACODE:20936
HistoryJul 31, 2019 - 7:19 a.m.

Insecure Path Defaults

2019-07-3107:19:43
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
175

0.001 Low

EPSS

Percentile

19.7%

JSON

OpenSSL has Insecure Path Defaults. When installed on a Windows machine, the default OPENSSLDIR is C:/usr/local which is world writable. This allows an attacker to modify OpenSSL’s default configuration, insert CA certificates, modify (or even replace) existing engine modules, etc.

CPENameOperatorVersion
opensslle1.0.210
opensslle1.0.210

References

Related

openvas 21
ibm 27
cve 1
nessus 21
osv 1
cvelist 1
nvd 1
ubuntucve 1
f5 1
debiancve 1
openssl 1
prion 1
redhatcve 1
pentestit 1
hackerone 2
cert 1
altlinux 4
symantec 1
fedora 3
ics 1
oracle 5
openvas
openvas
Huawei EulerOS: Security Advisory for openssl (EulerOS-SA-2019-2642)
2020-01-23 00:00:00
Huawei EulerOS: Security Advisory for openssl110f (EulerOS-SA-2019-1862)
2020-01-23 00:00:00
OpenSSL Default Installation Paths Vulnerability (CVE-2019-1552) - Windows
2019-08-14 00:00:00
ibm
ibm
Security Bulletin: Security Vulnerability in OpenSSL affect IBM Netezza Analytics
2020-02-11 06:43:42
Security Bulletin: OpenSSL publicly disclosed vulnerability
2020-03-02 16:40:29
Security Bulletin: Vulnerability in OpenSSL library affect OS Pattern Kit used in IBM Cloud Pak System
2020-07-07 16:58:06
cve
cve
CVE-2019-1552
2019-07-30 17:15:12
nessus
nessus
EulerOS 2.0 SP3 : openssl1.1.0f (EulerOS-SA-2019-2005)
2019-09-24 00:00:00
EulerOS 2.0 SP2 : openssl110f (EulerOS-SA-2019-1862)
2019-09-17 00:00:00
EulerOS 2.0 SP3 : openssl (EulerOS-SA-2019-2642)
2019-12-18 00:00:00
osv
osv
CVE-2019-1552
2019-07-30 17:15:12
cvelist
cvelist
CVE-2019-1552 Windows builds with insecure path defaults
2019-07-30 00:00:00
nvd
nvd
CVE-2019-1552
2019-07-30 17:15:12
ubuntucve
ubuntucve
CVE-2019-1552
2019-07-30 00:00:00
f5
f5
K94041354 : OpenSSL vulnerability CVE-2019-1552
2019-10-07 00:00:00
debiancve
debiancve
CVE-2019-1552
2019-07-30 17:15:12
openssl
openssl
Vulnerability in OpenSSL CVE-2019-1552
2019-07-30 00:00:00
prion
prion
Default configuration
2019-07-30 17:15:00
redhatcve
redhatcve
CVE-2019-1552
2019-08-26 14:59:31
pentestit
pentestit
UPDATE: Nmap 7.80
2019-08-12 21:59:41
hackerone
hackerone
curl: curl on Windows can be forced to execute code via OpenSSL environment variables
2019-10-14 23:02:51
Internet Bug Bounty: Windows builds with insecure path defaults (CVE-2019-1552)
2019-08-28 00:18:59
cert
cert
Veritas Backup Exec is vulnerable to privilege escalation due to OPENSSLDIR location
2020-12-23 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 9 package openssl10 version 1.0.2u-alt1.p9.1
2020-12-10 00:00:00
Security fix for the ALT Linux 9 package openssl1.1 version 1.1.1d-alt1
2019-09-19 00:00:00
Security fix for the ALT Linux 10 package openssl1.1 version 1.1.1d-alt1
2019-09-19 00:00:00
symantec
symantec
OpenSSL Vulnerabilities Oct 2018 - Jul 2019
2019-09-05 08:00:00
fedora
fedora
[SECURITY] Fedora 30 Update: compat-openssl10-1.0.2o-7.fc30
2019-09-25 01:08:23
[SECURITY] Fedora 31 Update: compat-openssl10-1.0.2o-8.fc31
2019-09-21 00:04:14
[SECURITY] Fedora 29 Update: compat-openssl10-1.0.2o-7.fc29
2019-09-26 01:41:32
ics
ics
Siemens SCALANCE X-200RNA Switch Devices
2022-12-19 12:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - October 2019
2020-01-22 00:00:00
Oracle Critical Patch Update Advisory - January 2020
2020-01-14 00:00:00
Oracle Critical Patch Update Advisory - October 2020
2020-10-20 00:00:00

0.001 Low

EPSS

Percentile

19.7%

JSON
Related for VERACODE:20936
openvas21ibm27cve1nessus21osv1cvelist1nvd1ubuntucve1f51debiancve1openssl1prion1redhatcve1pentestit1hackerone2cert1altlinux4symantec1fedora3ics1oracle5