A high privileged remote attacker can influence the parameters passed to the openssl command due to improper neutralisation of special elements when adding a password protected self-signed certificate.