VULNERABILITY INTELLIGENCE
CVE-2025-2545
EPSS probability0.19%
CISA KEVNot currently listed
Published2025-05-05
Last modified2026-06-17
Description
Vulnerability in Best Practical Solutions, LLC's Request Tracker prior to v5.0.8, where the Triple DES (3DES) cryptographic algorithm is used to protect emails sent with S/MIME encryption. Triple DES is considered obsolete and insecure due to its susceptibility to birthday attacks, which could compromise the confidentiality of encrypted messages.
Weakness classification
- cve-coordination@incibe.es: CWE-327