CVE-2025-2545lowCWE-327

CVE-2025-2545: falha de baixa gravidade em Best Practical Solutions Request Tracker

Deprecated 3DES cryptographic algorithm used by Request Tracker in emails encrypted with S/MIME

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar Request Tracker+ Monitorar request-tracker4

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

8Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 2.3epss 0.2%
Vulnerability in Best Practical Solutions, LLC's Request Tracker prior to v5.0.8, where the Triple DES (3DES) cryptographic algorithm is used to protect emails sent with S/MIME encryption. Triple DES is considered obsolete and insecure due to its susceptibility to birthday attacks, which could compromise the confidentiality of encrypted messages.
CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
Produtos afetados
Best Practical Solutions · Request Tracker
CVEs relacionadas — Best Practical Solutions Request Tracker

No mesmo produto, das mais perigosas para as menos.

CVE-2026-105454MEDIUMStored XSS via crafted URLs in HTML ticket content in Request TrackerEPSS 0.4%CVE-2024-3262MEDIUMInformation exposure vulnerability in Request Tracker (RT)EPSS 0.3%