CVE-2025-58402 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

The CGM CLININET application uses direct, sequential object identifiers "MessageID" without proper authorization checks. By modifying the parameter in the GET r…
High CVSS: 7.1

CVE-2025-58402

The CGM CLININET application uses direct, sequential object identifiers "MessageID" without proper authorization checks. By modifying the parameter in the GET request, an attacker can access messages and attachments belonging to other users.
Vendor
Cgm
Product
Clininet
CWE
CWE-639
Yayın Tarihi
2026-03-02 12:16:01
Güncelleme
2026-03-09 15:25:56
Source Identifier
cvd@cert.pl
KEV Date Added
-

Kategoriler

CWE-639 Clininet HIGH Cgm 2026

Referanslar

https://cert.pl/en/posts/2026/03/CVE-2025-10350/ https://www.cgm.com/pol_pl/products/szpital/cgm-clininet.html