Auth bypass in Cgm Clininet
CVE-2025-30035
The vulnerability enables an attacker to fully bypass authentication in CGM CLININET and gain access to any active user account by supplying only the username, without requiring a password or any other credentials. Obtaining a session ID i…
Vulnerability class: Broken Authentication
EPSS: 0.002 (11.0th percentile) — read the EPSS interpretation.
Affected products
- Cgm Clininet — versions 0
Weakness classification (CWE)
References
- cvd@cert.pl (third-party-advisory)
- cvd@cert.pl (product)