Auth bypass in Cgm Clininet

CVE-2025-30039

Unauthenticated access to the "/cgi-bin/CliniNET.prd/GetActiveSessions.pl" endpoint allows takeover of any user session logged into the system, including users with admin privileges.

Vulnerability class: Broken Authentication

EPSS: 0.000 (10.9th percentile) — read the EPSS interpretation.