CVE-2024-32042CWE-257

CyberPower PowerPanel business Storing Passwords in a Recoverable Format

Medium · published May 15, 2024

CVSS v3.1
4.9
EPSS
0%
Percentile
31.1
In the wild
Unconfirmed
What it is

The key used to encrypt passwords stored in the database can be found in

the

CyberPower PowerPanel

application code, allowing the passwords to be recovered.

The record
Technical detail
CVSS v3.1
4.9 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00383 · 31.1th percentile
Weakness
CWE-257 · Storing Passwords in a Recoverable Format
Published
2024-05-15T19:39Z
EPSS history
Timeline
  • 15 MAY 19:39Z
    CyberPower PowerPanel business Storing Passwords in a Recoverable Format
    cvelistv5