vulnerability

Ubuntu: USN-7692-1 (CVE-2025-2545): Request Tracker vulnerabilities

Try Surface Command

Back to search

Severity	CVSS	Published	Added	Modified
3	(AV:N/AC:H/Au:N/C:P/I:N/A:N)	May 5, 2025	Jul 17, 2025	Jan 16, 2026

Severity

CVSS

(AV:N/AC:H/Au:N/C:P/I:N/A:N)

Published

May 5, 2025

Added

Jul 17, 2025

Modified

Jan 16, 2026

Description

Vulnerability in Best Practical Solutions, LLC's Request Tracker prior to v5.0.8, where the Triple DES (3DES) cryptographic algorithm is used to protect emails sent with S/MIME encryption. Triple DES is considered obsolete and insecure due to its susceptibility to birthday attacks, which could compromise the confidentiality of encrypted messages.

Solutions

ubuntu-pro-upgrade-request-tracker5ubuntu-pro-upgrade-rt5-fcgiubuntu-pro-upgrade-rt5-standalone

References

CVE-2025-2545
https://attackerkb.com/topics/CVE-2025-2545
CWE-327
UBUNTU-USN-7692-1
URL-https://ubuntu.com/security/notices/USN-7692-1
URL-https://www.cve.org/CVERecord?id=CVE-2025-2545

NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.

Try it today