CVE-2024-3543 LoadMaster Reversible Password Encryption Algorithm
Attackers can decrypt stored passwords due to reversible encryption, leading to credential theft and potential system compromise in Progress LoadMaster.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2024-3543?
CVE-2024-3543 is a medium-severity vulnerability in Progress Software Corporation LoadMaster, published on 2 May 2024. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
Use of reversible password encryption algorithm allows attackers to decrypt passwords. Sensitive information can be easily unencrypted by the attacker, stolen credentials can be used for arbitrary actions to corrupt the system.
Which versions are affected by CVE-2024-3543?
It affects 1 product.
Products include Progress Loadmaster.
How do I fix CVE-2024-3543?
No fix has been published for CVE-2024-3543 yet. Limit exposure of the affected software until one is available.
Is CVE-2024-3543 being exploited?
There is no known exploitation of CVE-2024-3543 in the wild and no public exploit code.
Other vulnerabilities in Progress Software Corporation LoadMaster
- CVE-2024-1212 Progress Kemp LoadMaster OS Command Injection
- CVE-2014-5287 Command injection in n/a
- CVE-2024-56131 Improper Input Validation vulnerability of Authenticated User in Progress LoadMaster allows : OS Command Injection.
- CVE-2024-56132 Improper Input Validation vulnerability of Authenticated User in Progress LoadMaster allows : OS Command Injection.
- CVE-2024-56133 Improper Input Validation vulnerability of Authenticated User in Progress LoadMaster allows : OS Command Injection.
Sources
Also known as GHSA-fwm8-cg5f-xc9c.