CVE-2024-9679 - A Hardcoded Cryptographic key vulnerability existed in DLP Extension 11.11.1.3 which allowed the decryption of previously encrypted user credentials

MEDIUM

A Hardcoded Cryptographic key vulnerability existed in DLP Extension 11.11.1.3 which allowed the decryption of previously encrypted user credentials

Published Dec 16, 2024

5.3

MEDIUM

CVSS 3.1

EPSS 0.37%

A Hardcoded Cryptographic key vulnerability existed in DLP Extension 11.11.1.3 which allowed the decryption of previously encrypted user credentials.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

unaffected

Version	Status	Constraints
11.11.1.3	affected	-

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

Link	Providers	Tags
https://thrive.trellix.com/s/article/000013964

No recorded changes yet.

Sources

Status PUBLISHED

Assigner trellix

Published Dec 16, 2024

Updated Dec 16, 2024

Reserved Oct 9, 2024

Updated Dec 16, 2024

Status Deferred

Modified Jun 17, 2026

Severity n/a

Public date n/a