PT-2022-2684

Name of the Vulnerable Software and Affected Versions OpenSSL versions 3.0.0 through 3.0.2 Description The OpenSSL 3.0 implementation of the RC4-MD5 ciphersuite incorrectly uses the AAD data as the MAC key, making the MAC key trivially predictable. An attacker could exploit this issue by performi...