CVE-2025-8095

The OECH1 prefix encoding is intended to obfuscate values across the OpenEdge platform. It has been identified as cryptographically weak and unsuitable for stored encodings and enterprise applications. OECH1 encodings should be considered exploitable and immediately replaced by any other supported prefix encoding, all of which are based on symmetric encryption.

CVSS

No CVSS.

References

Link	Resource
https://community.progress.com/s/article/Unintended-Use-of-OECH1-for-Password-Secrets-Protection

Configurations

No configuration.

History

30 Sep 2026, 22:10

Type	Values Removed	Values Added
Summary		(es) La codificación de prefijo OECH1 está diseñada para ofuscar valores en toda la plataforma OpenEdge. Ha sido identificada como criptográficamente débil e inadecuada para codificaciones almacenadas y aplicaciones empresariales. Las codificaciones OECH1 deben considerarse explotables y ser reemplazadas inmediatamente por cualquier otra codificación de prefijo compatible, todas las cuales se basan en cifrado simétrico.

Information

Published : 2026-04-14 14:16

Updated : 2026-10-07 09:10

NVD link : CVE-2025-8095

Mitre link : CVE-2025-8095

CVE.ORG link : CVE-2025-8095

JSON object : View

Products Affected

No product.

CWE

CWE-257

Storing Passwords in a Recoverable Format

{"id": "CVE-2025-8095", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-8095", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2026-04-14T00:00:00+00:00"}}], "cvssMetricV40": [{"type": "Secondary", "source": "security@progress.com", "cvssData": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 9.1, "Automatable": "YES", "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "valueDensity": "DIFFUSE", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:X/V:D/RE:M/U:Red", "exploitMaturity": "UNREPORTED", "providerUrgency": "RED", "userInteraction": "NONE", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "NONE", "subIntegrityImpact": "HIGH", "vulnIntegrityImpact": "HIGH", "integrityRequirement": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "subAvailabilityImpact": "HIGH", "vulnAvailabilityImpact": "HIGH", "availabilityRequirement": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "subConfidentialityImpact": "HIGH", "vulnConfidentialityImpact": "HIGH", "confidentialityRequirement": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "vulnerabilityResponseEffort": "MODERATE", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED"}}]}, "affected": [{"source": "security@progress.com", "affectedData": [{"vendor": "Progress Software Corporation", "modules": ["OpenEdge Platform Prefix Encodings"], "product": "OpenEdge", "versions": [{"status": "affected", "version": "12.2.0", "versionType": "custom", "lessThanOrEqual": "12.2.18"}, {"status": "affected", "version": "12.8.0", "versionType": "custom", "lessThanOrEqual": "12.8.9"}], "platforms": ["Windows", "Linux", "64 bit", "32 bit"], "defaultStatus": "affected"}]}], "published": "2026-04-14T14:16:11.237", "references": [{"url": "https://community.progress.com/s/article/Unintended-Use-of-OECH1-for-Password-Secrets-Protection", "source": "security@progress.com"}], "vulnStatus": "Awaiting Analysis", "weaknesses": [{"type": "Secondary", "source": "security@progress.com", "description": [{"lang": "en", "value": "CWE-257"}]}], "descriptions": [{"lang": "en", "value": "The OECH1 prefix encoding is intended to obfuscate values across the OpenEdge platform. \u00a0It has been identified as cryptographically weak and unsuitable for stored encodings and enterprise applications. \u00a0OECH1 encodings should be considered exploitable and immediately replaced by any other supported prefix encoding, all of which are based on symmetric encryption."}, {"lang": "es", "value": "La codificaci\u00f3n de prefijo OECH1 est\u00e1 dise\u00f1ada para ofuscar valores en toda la plataforma OpenEdge. Ha sido identificada como criptogr\u00e1ficamente d\u00e9bil e inadecuada para codificaciones almacenadas y aplicaciones empresariales. Las codificaciones OECH1 deben considerarse explotables y ser reemplazadas inmediatamente por cualquier otra codificaci\u00f3n de prefijo compatible, todas las cuales se basan en cifrado sim\u00e9trico."}], "lastModified": "2026-10-07T09:10:00.160", "sourceIdentifier": "security@progress.com"}