# CVE-2024-24553

## Summary

- **CVE ID:** CVE-2024-24553
- **Severity:** MEDIUM
- **CVSS Score:** 5.9 (CVSS:4.0/AV:N/AC:H/AT:P/PR:H/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N)
- **CWE:** CWE-916
- **Published:** Jun 24, 2024
- **Last Modified:** Mar 13, 2026

## Description

Bludit uses the SHA-1 hashing algorithm to compute password hashes. Thus, attackers could determine cleartext passwords with brute-force attacks due to the inherent speed of SHA-1. In addition, the salt that is computed by Bludit is generated with a non-cryptographically secure function.

## Affected Products

- Bludit — Bludit (2.0)

## References

- [CNA](https://www.redguard.ch/blog/2024/06/20/security-advisory-bludit/)

## Exploitation Prediction (EPSS)

- **EPSS Score:** 0.22%
- **EPSS Percentile:** 12.1

---
_Exported from OnDuty AI Vulnerability Intelligence on 2026-09-11._