CVE-2025-0556CWE-319

Telerik Report Server Clear Text Transmission of Agent Commands

High · published February 12, 2025

CVSS v3.1
8.8
EPSS
0%
Percentile
22.5
In the wild
Unconfirmed
What it is

In Progress® Telerik® Report Server, versions prior to 2025 Q1 (11.0.25.211) when using the older .NET Framework implementation, communication of non-sensitive information between the service agent process and app host process occurs over an unencrypted tunnel, which can be subjected to local network traffic sniffing.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00309 · 22.5th percentile
Weakness
CWE-319 · Cleartext Transmission of Sensitive Information
Published
2025-02-12T15:11Z
EPSS history
Timeline
  • 12 FEB 15:11Z
    Telerik Report Server Clear Text Transmission of Agent Commands
    cvelistv5