CVE-2024-3543CWE-257
LoadMaster Reversible Password Encryption Algorithm
Medium · published May 2, 2024
What it is
Use of reversible password encryption algorithm allows attackers to decrypt passwords. Sensitive information can be easily unencrypted by the attacker, stolen credentials can be used for arbitrary actions to corrupt the system.
The record
Technical detail
- CVSS v3.1
- 6.4 · MEDIUM
- Vector
- CVSS:3.1/AV:A/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
- CVSS v4.0
- Not supplied
- EPSS
- 0.00277 · 19.1th percentile
- Weakness
- CWE-257 · Storing Passwords in a Recoverable Format
- Published
- 2024-05-02T14:05Z
EPSS history
Timeline