CVE-2025-47729 - CVE House
Back to Database
Status published Low CVE-2025-47729

The TeleMessage archiving backend through 2025-05-05 holds cleartext copies of...

Vulnerability Description

The TeleMessage archiving backend through 2025-05-05 holds cleartext copies of messages from TM SGNL (aka Archive Signal) app users, which is different functionality than described in the TeleMessage "End-to-End encryption from the mobile phone through to the corporate archive" documentation, as exploited in the wild in May 2025.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-47729

Credits & Attribution

No credits recorded in the NVD database.

References

More from TeleMessage

View All →
CVE-2025-48931
The TeleMessage service through 2025-05-05 relies on MD5 for password...
Low 3.2
CVE-2025-48930
The TeleMessage service through 2025-05-05 stores certain cleartext information in...
Low 2.8
CVE-2025-48929
The TeleMessage service through 2025-05-05 implements authentication through a long-lived...
Medium 4
CVE-2025-48928
The TeleMessage service through 2025-05-05 is based on a JSP...
Medium 4
CVE-2025-48927
The TeleMessage service through 2025-05-05 configures Spring Boot Actuator with...
Medium 5.3

Affected Vendor

TeleMessage

View all reports →

Affected Software

archiving backend
Vulnerable Versions:
0

Timeline

Official Publish: May 8th, 2025
Last Modified: October 21st, 2025
Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:N

Weaknesses (CWE)

CWE-912

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.