CVE-2020-36166

Veritas InfoScale and related components are affected by CVE-2020-36166. On startup, the OpenSSL library is loaded from \usr\local\ssl and attempts to read openssl.cnf from that path. If the file is absent, a low-privilege user may create a malicious OpenSSL engine via :\usr\local\ssl\openssl.cnf...