CVE-2024-3543

LoadMaster Reversible Password Encryption Algorithm

State: Published
Severity: 6.4 Medium
Published: May 2, 2024
Updated: Aug 8, 2024
Reserved: Apr 9, 2024

Description

Use of reversible password encryption algorithm allows attackers to decrypt passwords. Sensitive information can be easily unencrypted by the attacker, stolen credentials can be used for arbitrary actions to corrupt the system.

Scores

CVSS	Score	Vector	Source
3.1	6.4 Medium	CVSS:3.1/AV:A/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H	ProgressSoftware

Weaknesses

CWE-257 Storing Passwords in a Recoverable Format

Affected Products

Product	Versions
LoadMasterProgress Software Corporation	LoadMaster 7.2.55.0 (GA) to before 7.2.59.4Affected LoadMaster 7.2.49.0 (LTSF) to before 7.2.54.10Affected LoadMaster 7.2.48.11 (LTS) to before 7.2.48.12Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.