CVE-2025-54554

Summary

tiaudit in Tera Insights tiCrypt before 2025-07-17 allows unauthenticated REST API requests that reveal sensitive information about the underlying SQL queries and database structure.

Affected Software

Weaknesses

• CWE-863: CWE-863 Incorrect Authorization

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: yes
  • Technical Impact: partial

References

• https://ticrypt.com/docs/ticrypt-backend/audit/rest
• https://github.com/Aman-Parmar/CVE-2025-54554

• ←Previous
• Next→