MEDIUM
Misuse of SHA256 to create an encryption key
Published Dec 15, 2024
5.1
MEDIUMCVSS 4.0
EPSS 0.21%
Description
Use of Password Hash With Insufficient Computational Effort vulnerability in percona percona-toolkit allows Encryption Brute Forcing.This issue affects percona-toolkit: 3.6.0.
Affected products
-
- Version 3.6.0StatusaffectedConstraints-
- Version
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| Percona | Percona-Toolkit | unaffected |
|
No data.
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
Vendor solution
User Auto-Generated passwords when encrypting file with the tool
Weaknesses (1)
References (2)
Change history (0)
No recorded changes yet.
Sources
CVE.org / MITRE
Status PUBLISHED
Assigner CyberArk
Published Dec 15, 2024
Updated Dec 16, 2024
Reserved Aug 12, 2024
Link CVE-2024-7701
CISA Vulnrichment
Updated Dec 16, 2024
ENISA EUVD
EUVD-2024-48557 Assigner CyberArk
Published Dec 15, 2024
Updated Dec 16, 2024
Exploited since n/a
Link EUVD-2024-48557