CVE-2025-3480

CVE-2025-3480 affects MedDream WEB DICOM Viewer. The issue is cleartext transmission of credentials through the Web Portal, enabling network-adjacent attackers to disclose credentials without authentication. Multiple sources (e.g., ZDI-25-246) corroborate a credentials disclosure vulnerability in...