Insecure File Permissions in OpenSSL Desktop GUI Leading to Plaintext Exposure

Executive Summary

This vulnerability affects openssl_encrypt versions before 1.4.9. The desktop GUI writes decrypted plaintext files with world-readable permissions by default, allowing any local user on a multi-user system to read these files.

Useful 0 Not Useful 0

Detection Guidance

Check file permissions of decrypted output files created by the openssl_encrypt GUI. Look for files with permissions 0644 or world-readable settings. Use commands like 'ls -l' to inspect file permissions or 'find / -type f -perm 0644' to locate such files.

Useful 0 Not Useful 0

Impact Analysis

Attackers could access sensitive decrypted data stored in files created by the GUI. This includes confidential information that should remain private, especially on shared systems where multiple users have access.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability likely violates data protection regulations like GDPR and HIPAA, which require strict controls over sensitive data access. Unauthorized file access could lead to compliance breaches and legal consequences.

Useful 0 Not Useful 0

Mitigation Strategies

Upgrade openssl_encrypt to version 1.4.9 or later. Verify GUI output files have owner-only permissions (0600). Review and correct file permissions on existing decrypted files to restrict access.

Useful 0 Not Useful 0