{"cve_id":"CVE-2022-2068","published":"2022-06-21T15:15:09.060000+00:00","last_modified":"2026-10-14T13:17:20.110000+00:00","vuln_status":"Modified","description":"In addition to the c_rehash shell command injection identified in CVE-2022-1292, further circumstances where the c_rehash script does not properly sanitise shell metacharacters to prevent command injection were found by code review. When the CVE-2022-1292 was fixed it was not discovered that there are other places in the script where the file names of certificates being hashed were possibly passed to a command executed through the shell. This script is distributed by some operating systems in a manner where it is automatically executed. On such operating systems, an attacker could execute arbitrary commands with the privileges of the script. Use of the c_rehash script is considered obsolete and should be replaced by the OpenSSL rehash command line tool. Fixed in OpenSSL 3.0.4 (Affected 3.0.0,3.0.1,3.0.2,3.0.3). Fixed in OpenSSL 1.1.1p (Affected 1.1.1-1.1.1o). Fixed in OpenSSL 1.0.2zf (Affected 1.0.2-1.0.2ze).","cvss_version":"3.1","cvss_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","base_score":7.3,"base_severity":"HIGH","attack_vector":"LOCAL","privileges_req":"LOW","user_interaction":"REQUIRED","scope":"UNCHANGED","impact_c":"HIGH","impact_i":"HIGH","impact_a":"HIGH","cwe_ids":["CWE-78"],"in_kev":false,"kev_date_added":null,"kev_ransomware":false,"epss_score":0.96391,"epss_percentile":0.9988,"cap_rule_version":"0.1.1","stage":"EXECUTION","req_access":"USER","req_vector":"LOCAL","req_user_interaction":true,"grant_access":"USER","caps":["CODE_EXEC"],"terminal":false,"cap_confidence":"high","ingested_at":"2026-10-28T03:16:54.929943+00:00","first_seen":"2022-06-21T15:15:09.060000+00:00","kev_first_seen":null,"novelty_score":0.0,"novelty_reasons":[],"novelty_at":null,"vendors":["broadcom","debian","fedoraproject","netapp","openssl","siemens"],"products":["aff_8300","aff_8300_firmware","aff_8700","aff_8700_firmware","aff_a400","aff_a400_firmware","bootstrap_os","debian_linux","element_software","fas_8300","fas_8300_firmware","fas_8700","fas_8700_firmware","fas_a400","fas_a400_firmware","fedora","h300s","h300s_firmware","h410c","h410c_firmware","h410s","h410s_firmware","h500s","h500s_firmware","h610c","h610c_firmware","h610s","h610s_firmware","h615c","h615c_firmware","h700s","h700s_firmware","hci_compute_node","hci_management_node","ontap_antivirus_connector","ontap_select_deploy_administration_utility","openssl","sannav","santricity_smi-s_provider","sinec_ins","smi-s_provider","snapmanager","solidfire"],"affected":[{"vendor":"broadcom","product":"sannav","ranges":["all versions"]},{"vendor":"debian","product":"debian_linux","ranges":["10.0","11.0"]},{"vendor":"fedoraproject","product":"fedora","ranges":["35","36"]},{"vendor":"netapp","product":"aff_8300_firmware","ranges":["all versions"]},{"vendor":"netapp","product":"aff_8700_firmware","ranges":["all versions"]},{"vendor":"netapp","product":"aff_a400_firmware","ranges":["all versions"]},{"vendor":"netapp","product":"bootstrap_os","ranges":["all versions"]},{"vendor":"netapp","product":"element_software","ranges":["all versions"]},{"vendor":"netapp","product":"fas_8300_firmware","ranges":["all versions"]},{"vendor":"netapp","product":"fas_8700_firmware","ranges":["all versions"]},{"vendor":"netapp","product":"fas_a400_firmware","ranges":["all versions"]},{"vendor":"netapp","product":"h300s_firmware","ranges":["all versions"]},{"vendor":"netapp","product":"h410c_firmware","ranges":["all versions"]},{"vendor":"netapp","product":"h410s_firmware","ranges":["all versions"]},{"vendor":"netapp","product":"h500s_firmware","ranges":["all versions"]},{"vendor":"netapp","product":"h610c_firmware","ranges":["all versions"]},{"vendor":"netapp","product":"h610s_firmware","ranges":["all versions"]},{"vendor":"netapp","product":"h615c_firmware","ranges":["all versions"]},{"vendor":"netapp","product":"h700s_firmware","ranges":["all versions"]},{"vendor":"netapp","product":"hci_management_node","ranges":["all versions"]},{"vendor":"netapp","product":"ontap_antivirus_connector","ranges":["all versions"]},{"vendor":"netapp","product":"ontap_select_deploy_administration_utility","ranges":["all versions"]},{"vendor":"netapp","product":"santricity_smi-s_provider","ranges":["all versions"]},{"vendor":"netapp","product":"smi-s_provider","ranges":["all versions"]},{"vendor":"netapp","product":"snapmanager","ranges":["all versions"]},{"vendor":"netapp","product":"solidfire","ranges":["all versions"]},{"vendor":"openssl","product":"openssl","ranges":["≥ 1.1.1 and < 1.1.1p","≥ 3.0.0 and < 3.0.4","≥ 1.0.2 and < 1.0.2zf"]},{"vendor":"siemens","product":"sinec_ins","ranges":["1.0","< 1.0"]}]}