CVE-2025-30043

CGM CLININET is vulnerable to Missing Authentication for Critical Function in the /DocManagment path. The endpoint is accessible without authentication, allowing an unauthenticated attacker in the adjacent network to retrieve the list of patient documents and download those documents. This issue was fixed in version 2026.MS3

CVSS

No CVSS.

References

Link	Resource
https://cert.pl/en/posts/2026/10/CVE-2025-30043/
https://www.cgm.com/pol_pl/products/szpital/cgm-clininet.html

Configurations

No configuration.

History

28 Oct 2026, 14:10

Type	Values Removed	Values Added
Summary		(es) CGM CLININET es vulnerable a la falta de autenticación para una función crítica en la ruta /DocManagment. El endpoint es accesible sin autenticación, lo que permite a un atacante no autenticado en la red adyacente recuperar la lista de documentos de pacientes y descargar dichos documentos.\n\nEste problema se solucionó en la versión 2026.MS3

23 Oct 2026, 09:17

Type	Values Removed	Values Added
New CVE

Information

Published : 2026-10-23 09:17

Updated : 2026-10-28 20:17

NVD link : CVE-2025-30043

Mitre link : CVE-2025-30043

CVE.ORG link : CVE-2025-30043

JSON object : View

Products Affected

No product.

CWE

CWE-306

Missing Authentication for Critical Function

{"id": "CVE-2025-30043", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-30043", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-10-28T17:48:20.463317Z"}}], "cvssMetricV40": [{"type": "Secondary", "source": "cvd@cert.pl", "cvssData": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 7.1, "Automatable": "NOT_DEFINED", "attackVector": "ADJACENT", "baseSeverity": "HIGH", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "exploitMaturity": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "userInteraction": "NONE", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "NONE", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "NONE", "integrityRequirement": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "NONE", "availabilityRequirement": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "subConfidentialityImpact": "NONE", "vulnConfidentialityImpact": "HIGH", "confidentialityRequirement": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "vulnerabilityResponseEffort": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED"}}]}, "affected": [{"source": "cvd@cert.pl", "affectedData": [{"vendor": "CGM", "modules": ["/DocManagment"], "product": "CGM CLININET", "versions": [{"status": "affected", "version": "0", "lessThan": "2026.MS3", "versionType": "custom"}], "defaultStatus": "unaffected"}]}], "published": "2026-10-23T09:17:03.300", "references": [{"url": "https://cert.pl/en/posts/2026/10/CVE-2025-30043/", "source": "cvd@cert.pl"}, {"url": "https://www.cgm.com/pol_pl/products/szpital/cgm-clininet.html", "source": "cvd@cert.pl"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Secondary", "source": "cvd@cert.pl", "description": [{"lang": "en", "value": "CWE-306"}]}], "descriptions": [{"lang": "en", "value": "CGM CLININET is vulnerable to Missing Authentication for Critical Function in the /DocManagment path. The endpoint is accessible without authentication, allowing an unauthenticated attacker in the adjacent network to retrieve the list of patient documents and download those documents.\u00a0\n\n\nThis issue was fixed in version 2026.MS3"}, {"lang": "es", "value": "CGM CLININET es vulnerable a la falta de autenticaci\u00f3n para una funci\u00f3n cr\u00edtica en la ruta /DocManagment. El endpoint es accesible sin autenticaci\u00f3n, lo que permite a un atacante no autenticado en la red adyacente recuperar la lista de documentos de pacientes y descargar dichos documentos.\\n\\nEste problema se solucion\u00f3 en la versi\u00f3n 2026.MS3"}], "lastModified": "2026-10-28T20:17:15.560", "sourceIdentifier": "cvd@cert.pl"}