CVEvulnerability

CVE-2024-3543

7.5 HIGH Published 2024-05-02 Modified 2026-06-17 Official page ↗
Status
Analyzed
Published
2024-05-02
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
6.4 MEDIUM — CVSS:3.1/AV:A/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS 3.1 ([email protected])
7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Weaknesses
CWE-257, CWE-522

Description

Use of reversible password encryption algorithm allows attackers to decrypt passwords.  Sensitive information can be easily unencrypted by the attacker, stolen credentials can be used for arbitrary actions to corrupt the system.

Affected configurations

• progress loadmaster (>= 7.2.49.0 < 7.2.54.10) • progress loadmaster (>= 7.2.55.0 < 7.2.59.4) • progress loadmaster 7.2.48.11

Related

Weakness · CWE (2)

  • CWE-257 Storing Passwords in a Recoverable Format weakness
  • CWE-522 Insufficiently Protected Credentials weakness

References