Known Exploited Vulnerabilities · CISA KEV Catalog

CVE-2025-48928: Tele Message TM SGNL Exposure of Core Dump File to an Unauthorized Control Sphere Vulnerability

TeleMessage TM SGNL contains an exposure of core dump file to an unauthorized control sphere Vulnerability. This vulnerability is based on a JSP application in which the heap content is roughly equivalent to a "core dump" in which a password previously sent over HTTP would be included in this dump.

Read the original at CISA KEV Catalog ↗

Topics
Vulnerabilities & Patching
Mentions
CVE-2025-48928TeleMessage
Related
CVE-2025-47729: Tele Message TM SGNL Hidden Functionality Vulnerability Known Exploited Vulnerabilities · May 12, 2025