Auth bypass in Cgm Clininet

CVE-2025-30040

The vulnerability allows unauthenticated users to download a file containing session ID data by directly accessing the "/cgi-bin/CliniNET.prd/utils/userlogxls.pl" endpoint.

Vulnerability class: Broken Authentication

EPSS: 0.001 (23.0th percentile) — read the EPSS interpretation.