CVE-2024-3543 MEDIUM

CVE-2024-3543: LoadMaster Reversible Password Encryption Algorithm

Vendor Progress Software Corporation
Product LoadMaster
Weakness CWE-257
Published May 2, 2024
Last update August 8, 2024

CVSS base score

6.4/10
Attack vector Adjacent
Attack complexity High
Privileges required High
User interaction None
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:A/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

What the vulnerability does

01Description

Use of reversible password encryption algorithm allows attackers to decrypt passwords.  Sensitive information can be easily unencrypted by the attacker, stolen credentials can be used for arbitrary actions to corrupt the system.

Key dates

02Disclosure timeline

May 2, 2024 CVE published
August 8, 2024 Record updated