Access Control Vulnerability in Asseco ADMX System for Medical Record Processing
CVE-2025-4596

5.3MEDIUM

Key Information:

Vendor

Asseco

Status
Amdx
Vendor
CVE Published:
8 January 2026

What is CVE-2025-4596?

The Asseco ADMX system, utilized for the management of medical records, is vulnerable due to improper access controls. This flaw permits authenticated users to manipulate GET request arguments containing document IDs, potentially granting them unauthorized access to other users' medical files. A patch addressing this vulnerability has been implemented in version 6.09.01.62 of the ADMX system to enhance security.

Affected Version(s)

AMDX 0 < 6.09.01.62

References

https://cert.pl/en/posts/2026/01/CVE-2025-4596

CVSS V4

Score:
5.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Wiktor Mróz
.