CVE-2024-3543

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-3543
Use of reversible password encryption algorithm allows attackers to decrypt passwords.  Sensitive information can be easily unencrypted by the attacker, stolen credentials can be used for arbitrary actions to corrupt the system.

6.4 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 0.5 / Impact : 5.9

Attack Vector ADJACENT_NETWORK

Attack Complexity HIGH

Privileges Required HIGH

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://kemptechnologies.com/
https://support.kemptechnologies.com/hc/en-us/articles/25724813518605-ECS-Connection-Manager-Security-Vulnerabilities-CVE-2024-3544-and-CVE-2024-3543
Configurations

No configuration.

History

02 May 2024, 15:15

Type Values Removed Values Added
Summary (en) Use of reversible password encryption algorithm allows attackers to decrypt passwords.   Sensitive information can be easily unencrypted by the attacker, stolen credentials can be used for arbitrary actions to corrupt the system. (en) Use of reversible password encryption algorithm allows attackers to decrypt passwords.  Sensitive information can be easily unencrypted by the attacker, stolen credentials can be used for arbitrary actions to corrupt the system.

02 May 2024, 14:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-05-02 14:15

Updated : 2024-05-02 18:00

NVD link : CVE-2024-3543

Mitre link : CVE-2024-3543

CVE.ORG link : CVE-2024-3543

JSON object : View

Products Affected

No product.

CWE
CWE-257

Storing Passwords in a Recoverable Format