Skip to content
OpenAdvisories
Medium · 6.4 CVE-2024-3543 EUVD-2024-32129GHSA-fwm8-cg5f-xc9c

LoadMaster Reversible Password Encryption Algorithm

Published May 2, 2024 · Updated Aug 8, 2024 · Assigned by ProgressSoftware

Description

Use of reversible password encryption algorithm allows attackers to decrypt passwords.  Sensitive information can be easily unencrypted by the attacker, stolen credentials can be used for arbitrary actions to corrupt the system.

Affected products

VendorProductAffectedFixed
Progress Software LoadMaster LoadMaster 7.2.55.0 (GA) – < 7.2.59.4, LoadMaster 7.2.49.0 (LTSF) – < 7.2.54.10, LoadMaster 7.2.48.11 (LTS) – < 7.2.48.12 7.2.59.4

References