CVE-2025-30043

CGM CLININET is vulnerable to Missing Authentication for Critical Function in the /DocManagment path. The endpoint is accessible without authentication, allowing an unauthenticated attacker in the adjacent network to retrieve the list of patient documents and download those documents. This issue...

CVE-2025-30043

The CGM CLININET software is vulnerable to Missing Authentication for Critical Function (CWE-306) within the /DocManagment path. This flaw allows an unauthenticated attacker located in the adjacent network to access the endpoint without credentials. Successful exploitation enables the attacker to...