CVE-2025-0556: Telerik Report Server Clear Text Transmission of Agent Commands
In Progress® Telerik® Report Server, versions prior to 2025 Q1 (11.0.25.211) when using the older .NET Framework implementation, communication of non-sensitive information between the service agent process and app host process occurs over an unencrypted tunnel, which can be subjected to local network traffic sniffing.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-0556?
CVE-2025-0556 has a severity rating that indicates a medium risk level due to the unencrypted communication of non-sensitive information.
How do I fix CVE-2025-0556?
To fix CVE-2025-0556, upgrade your Telerik Report Server to version 2025 Q1 (11.0.25.211) or later.
What versions are affected by CVE-2025-0556?
CVE-2025-0556 affects all versions of Telerik Report Server prior to 2025 Q1 (11.0.25.211).
What type of vulnerability is CVE-2025-0556?
CVE-2025-0556 is a security vulnerability related to the use of unencrypted communication between processes.
What impact does CVE-2025-0556 have on data security?
The impact of CVE-2025-0556 could potentially include exposure of non-sensitive information during transmission, though it does not directly allow for sensitive data access.