Obsolete Cryptographic Algorithm Vulnerability in Request Tracker by Best Practical Solutions

CVE-2025-2545

What is CVE-2025-2545?

A vulnerability exists in Request Tracker version 5.0.7 by Best Practical Solutions, where the obsolete Triple DES (3DES) cryptographic algorithm is employed in S/MIME encryption of emails. This algorithm is deemed insecure due to its vulnerability to birthday attacks, potentially allowing unauthorized parties to compromise the confidentiality of sensitive communications. Organizations using this version are urged to upgrade to more secure encryption methods to safeguard their email transactions.

References