Auth bypass in Cgm Clininet

CVE-2025-30041

The paths "/cgi-bin/CliniNET.prd/utils/userlogstat.pl", "/cgi-bin/CliniNET.prd/utils/usrlogstat.pl", and "/cgi-bin/CliniNET.prd/utils/dblogstat.pl" expose data containing session IDs.

Vulnerability class: Broken Authentication

EPSS: 0.000 (10.9th percentile) — read the EPSS interpretation.