{"id":"CVE-2024-7701","summary":"Misuse of SHA256 to create an encryption key","details":"Use of Password Hash With Insufficient Computational Effort vulnerability in percona percona-toolkit allows Encryption Brute Forcing.This issue affects percona-toolkit: 3.6.0.","modified":"2026-08-12T03:30:26.853428797Z","published":"2024-12-15T10:56:26.124Z","database_specific":{"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/7xxx/CVE-2024-7701.json","cna_assigner":"CyberArk","cwe_ids":["CWE-916"]},"references":[{"type":"WEB","url":"https://github.com/percona/percona-toolkit/blob/aa1ac0e6889168fddf73c3a72d447e9ea0c0c63b/src/go/pt-secure-collect/encrypt.go#L17"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/7xxx/CVE-2024-7701.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2024-7701"},{"type":"PACKAGE","url":"https://github.com/percona/percona-toolkit"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/percona/percona-toolkit","events":[{"introduced":"655a5fa9db8039ae24c37a08cac58a4bc82b0d7f"},{"last_affected":"655a5fa9db8039ae24c37a08cac58a4bc82b0d7f"}],"database_specific":{"source":["AFFECTED_FIELD","CPE_STRING"],"cpe":"cpe:2.3:a:percona:toolkit:3.6.0:*:*:*:*:*:*:*","extracted_events":[{"introduced":"3.6.0"},{"last_affected":"3.6.0"}]}}],"versions":["3.6.0","v3.6.0"],"database_specific":{"source":"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-7701.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:P/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"}]}