Changing TSA Missing Authentication Vulnerability Allowing Unauthenticated Database Access

A missing authentication vulnerability has been identified in the Timestamp Authority (TSA) software developed by Changing. This vulnerability allows unauthenticated remote attackers to read, modify, and delete contents of the database. It affects TSA products purchased before February 6, 2025.

Impact

Exploitation of this vulnerability could lead to unauthorized access and manipulation of database contents, including reading, modifying, and deleting data.

Remediation

Users are advised to contact the vendor to confirm whether a fix has been implemented.