Auth bypass in Cgm Clininet

CVE-2025-30048

The "serverConfig" endpoint, which returns the module configuration including credentials, is accessible without authentication.

Vulnerability class: Broken Authentication

EPSS: 0.000 (8.6th percentile) — read the EPSS interpretation.