CVE-2025-2545

Publication date

2025-05-05 11:28:43

Family

INCIBE

State

PUBLISHED

Description

Vulnerability in Best Practical Solutions, LLCs Request Tracker prior to v5.0.8, where the Triple DES (3DES) cryptographic algorithm is used to protect emails sent with S/MIME encryption. Triple DES is considered obsolete and insecure due to its susceptibility to birthday attacks, which could compromise the confidentiality of encrypted messages.