Authentication Bypass in CGM CLININET by CGM

CVE-2025-30035

What is CVE-2025-30035?

The identified vulnerability allows attackers to bypass the standard authentication mechanisms within CGM CLININET. By simply providing a username, an attacker can gain unauthorized access to any active user account without needing a password or other authentication factors. This breach potentially leads to session takeover, granting full privileges to the attacker as if they were the legitimate user, thereby compromising sensitive data and system integrity.

References