CVE-2007-5502: OpenSSL Fips Object Module

Medium severity, CVSS 6.4. EPSS: 2.3% chance of exploitation in the next 30 days.

The PRNG implementation for the OpenSSL FIPS Object Module 1.1.1 does not perform auto-seeding during the FIPS self-test, which generates random data that is more predictable than expected and makes it easier for attackers to bypass protection mechanisms that rely on the randomness.

Affected products

• OpenSSL Fips Object Module: version 1.1.1 only

Published 2007-12-01. Last modified 2026-06-16.