API Authentication Vulnerability in TeleMessage's Archiving Backend
CVE-2025-47730
4.8MEDIUM
What is CVE-2025-47730?
The TeleMessage archiving backend has a security flaw that permits unauthorized API calls for authentication token requests. This vulnerability specifically arises when the TM SGNL application, designed for managing archived signals, utilizes hardcoded credentials to gain access, compromising user security. Such exposure could allow malicious entities to exploit the system and access sensitive user data without proper consent.
Affected Version(s)
archiving backend 0 <= 2025-05-05
References
CVSS V3.1
Score:
4.8
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved
