Skip to content
CVE PROGRAM SOURCE RECORD9.0 Critical

CVE-2025-30041

Missing authentication in APIs returning statistical data along with session IDs

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
CERT-PL

Description

The paths "/cgi-bin/CliniNET.prd/utils/userlogstat.pl", "/cgi-bin/CliniNET.prd/utils/usrlogstat.pl", and "/cgi-bin/CliniNET.prd/utils/dblogstat.pl" expose data containing session IDs.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

CGM CGM CLININET

Default version status: unaffected

  • 0 to < 2025.MS1affected

References