VULNERABILITY INTELLIGENCE

CVE-2024-3543

CVSS score6.4 MEDIUM
EPSS probability0.28%
CISA KEVNot currently listed
Published2024-05-02
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:A/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

Description

Use of reversible password encryption algorithm allows attackers to decrypt passwords.  Sensitive information can be easily unencrypted by the attacker, stolen credentials can be used for arbitrary actions to corrupt the system.

Weakness classification

  • security@progress.com: CWE-257
  • nvd@nist.gov: CWE-522

Primary references