CVE-2025-0556 | BDVDB-2026-266231 Detail
Progress SoftwareTelerik Report Server
Description#
In Progress® Telerik® Report Server, versions prior to 2025 Q1 (11.0.25.211) when using the older .NET Framework implementation, communication of non-sensitive information between the service agent process and app host process occurs over an unencrypted tunnel, which can be subjected to local network traffic sniffing.
Impact#
CAPEC-158 Sniffing Network Traffic
Weaknesses#
- CWE-319 Cleartext Transmission of Sensitive Information
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.