Vulnerability of OpenSSL: information disclosure via PKCS7/CMS Padding Oracle Synthesis of the vulnerabilityĪn attacker can bypass access restrictions to data via PKCS7/CMS Padding Oracle of OpenSSL, in order to obtain sensitive information.