Auth bypass in Cgm Clininet

CVE-2025-30048

The "serverConfig" endpoint, which returns the module configuration including credentials, is accessible without authentication.

Vulnerability class: Broken Authentication

EPSS: 0.002 (16.3th percentile) — read the EPSS interpretation.