CVE-2025-48930 Information disclosure in service
The TeleMessage service stores cleartext information in memory, allowing adversaries to potentially access sensitive data through memory inspection.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2025-48930?
CVE-2025-48930 is a low-severity vulnerability in TeleMessage service, published on 28 May 2025. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
The TeleMessage service through 2025-05-05 stores certain cleartext information in memory, even though memory content may be accessible to an adversary through various avenues.
Weakness: CWE-316
Which versions are affected by CVE-2025-48930?
It affects 1 product.
Products include Smarsh Telemessage.
How do I fix CVE-2025-48930?
No fix has been published for CVE-2025-48930 yet. Limit exposure of the affected software until one is available.
Is CVE-2025-48930 being exploited?
There is no known exploitation of CVE-2025-48930 in the wild and no public exploit code.
Other vulnerabilities in TeleMessage service
- CVE-2025-48927 TeleMessage TM SGNL Initialization of a Resource with an Insecure Default
- CVE-2025-48928 TeleMessage TM SGNL Exposure of Core Dump File to an Unauthorized Control Sphere
- CVE-2025-47730 Hardcoded credentials in archiving backend
- CVE-2025-48925 Weak cryptography in service
- CVE-2025-48926 Information disclosure in service
Sources
Also known as GHSA-v4hr-6g26-8757.