VULNERABILITY INTELLIGENCE
CVE-2025-30035
EPSS probability0.28%
CISA KEVNot currently listed
Published2026-03-02
Last modified2026-06-17
Description
The vulnerability enables an attacker to fully bypass authentication in CGM CLININET and gain access to any active user account by supplying only the username, without requiring a password or any other credentials. Obtaining a session ID is sufficient for session takeover and grants access to the system with the privileges of the targeted user.
Weakness classification
- cvd@cert.pl: CWE-306