2 matches found
Spring Boot Actuator Data Compromise
The vulnerability of the Spring Boot Actuator component in the corporate security solution for message exchange via TeleMessage TM SGNL is related to the insecure initialization of resources. Exploiting this vulnerability could allow a malicious actor, operating remotely, to compromise the...
5.3CVSS8.9AI score0.12152EPSS
SaveExploits0References4Affected Software1
VulnCheck KEV: CVE-2025-48925
The TeleMessage service through 2025-05-05 relies on the client side e.g., the TM SGNL app to do MD5 hashing, and then accepts the hash as the authentication credential...
7.5CVSS5.9AI score0.00275EPSS
SaveIn wildExploits0References2
20