Description
The TeleMessage service through 2025-05-05 implements authentication through a long-lived credential (e.g., not a token with a short expiration time) that can be reused at a later date if discovered by an adversary.
Scores
CVSS v3
4.0
EPSS
0.0013
EPSS Percentile
31.5%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:N
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
no
Technical Impact
partial
Details
VulnCheck KEV
2025-05-28
CWE
CWE-613
CWE-922
Status
published
Products (1)
smarsh/telemessage
< 2025-05-05
Published
May 28, 2025
Tracked Since
Feb 18, 2026