8.2Alta
CVE-2025-30049Use of Unsalted MD5 Password Hashes in CGM CLININET
Descripción
The CGM CLININET application stores user passwords as unsalted MD5 hashes. This issue was fixed in versions 2026.MS1 and 2026.MS3
Debilidad (CWE):
CWE-916
Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.
Productos y versiones afectados
| Fabricante | Producto | Versiones | |
|---|---|---|---|
| CGM | CGM CLININET | < 2026.MS1, < 2026.MS3 |
Referencias y parches
- https://cert.pl/en/posts/2026/10/CVE-2025-30043/ third-party-advisory
- https://www.cgm.com/pol_pl/products/szpital/cgm-clininet.html product