CVE-2024-3543: Use of reversible password encryption algorithm allows attackers to decrypt passwords. Sensitive information can be easily unencrypted by the attacker, stolen…

PriorityP343high7.5CVSS 3.1

AVNACLPRNUINSUCHINAN

EPSS

0.28%

19.4th percentile

Use of reversible password encryption algorithm allows attackers to decrypt passwords. Sensitive information can be easily unencrypted by the attacker, stolen credentials can be used for arbitrary actions to corrupt the system.

Affected

6 ranges

Vendor	Product	Version range	Fixed in
progress	loadmaster	—	—
progress	loadmaster	>= 7.2.49.0 < 7.2.54.10	7.2.54.10
progress	loadmaster	>= 7.2.55.0 < 7.2.59.4	7.2.59.4
progress_software_corporation	loadmaster	>= LoadMaster 7.2.48.11 (LTS) < 7.2.48.12	7.2.48.12
progress_software_corporation	loadmaster	>= LoadMaster 7.2.49.0 (LTSF) < 7.2.54.10	7.2.54.10
progress_software_corporation	loadmaster	>= LoadMaster 7.2.55.0 (GA) < 7.2.59.4	7.2.59.4

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.