Security Advisory

CVE-2025-2545

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2025-05-05 11:28:43
Last updated 2025-11-03 19:45:04
Assigner INCIBE
State PUBLISHED

Description

Vulnerability in Best Practical Solutions, LLCs Request Tracker prior to v5.0.8, where the Triple DES (3DES) cryptographic algorithm is used to protect emails sent with S/MIME encryption. Triple DES is considered obsolete and insecure due to its susceptibility to birthday attacks, which could compromise the confidentiality of encrypted messages.