CVE-2025-47730 Hardcoded credentials in archiving backend
Hardcoded credentials in the TeleMessage archiving backend allow attackers to obtain authentication tokens and access user data.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2025-47730?
CVE-2025-47730 is a medium-severity vulnerability in TeleMessage archiving backend, published on 8 May 2025. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
The TeleMessage archiving backend through 2025-05-05 accepts API calls (to request an authentication token) from the TM SGNL (aka Archive Signal) app with the credentials of logfile for the user and enRR8UVVywXYbFkqU#QDPRkO for the password.
Weakness: CWE-798
Which versions are affected by CVE-2025-47730?
It affects 1 product.
Products include Smarsh Telemessage.
How do I fix CVE-2025-47730?
No fix has been published for CVE-2025-47730 yet. Limit exposure of the affected software until one is available.
Is CVE-2025-47730 being exploited?
There is no known exploitation of CVE-2025-47730 in the wild and no public exploit code.
Other vulnerabilities in TeleMessage archiving backend
- CVE-2025-48927 TeleMessage TM SGNL Initialization of a Resource with an Insecure Default
- CVE-2025-48928 TeleMessage TM SGNL Exposure of Core Dump File to an Unauthorized Control Sphere
- CVE-2025-48925 Weak cryptography in service
- CVE-2025-48926 Information disclosure in service
- CVE-2025-48929 Auth bypass in service
Sources
Also known as GHSA-9qc4-m2hc-5vc5.