CVE-2025-2545CWE-327

Deprecated 3DES cryptographic algorithm used by Request Tracker in emails encrypted with S/MIME

Low · published May 5, 2025

CVSS v4.0
2.3
EPSS
0%
Percentile
8.2
In the wild
Unconfirmed
What it is

Vulnerability in Best Practical Solutions, LLC's Request Tracker prior to v5.0.8, where the Triple DES (3DES) cryptographic algorithm is used to protect emails sent with S/MIME encryption. Triple DES is considered obsolete and insecure due to its susceptibility to birthday attacks, which could compromise the confidentiality of encrypted messages.

The record
Technical detail
CVSS v4.0
2.3 · LOW
Vector
CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
EPSS
0.00190 · 8.2th percentile
Weakness
CWE-327 · Use of a Broken or Risky Cryptographic Algorithm
Published
2025-05-05T11:28Z
EPSS history
Timeline
  • 05 MAY 11:28Z
    Deprecated 3DES cryptographic algorithm used by Request Tracker in emails encrypted with S/MIME
    cvelistv5