| Package | Affected versions | Patched versions |
|---|---|---|
| openssl-encrypt | < 1.4.0 | 1.4.0 |
| openssl encrypt | < 1.4.0 | 1.4.0 |
openssl_encrypt versions before 1.4.0 contain hardcoded database credentials in standalone server configuration files. Attackers on the same network can access PostgreSQL databases using well-known default credentials to retrieve sensitive data.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free