Password Decoding Vulnerability in Asseco InfoMedica by Asseco

CVE-2025-8307

What is CVE-2025-8307?

A security vulnerability exists in Asseco InfoMedica that affects the way user passwords are encoded. The system stores all user passwords in a database in an encoded format. However, an attacker with access to these encoded passwords can exploit an algorithm found in the client-side part of the software to decode them, potentially compromising user accounts. Users are advised to upgrade to versions 4.50.1 or 5.38.0 to mitigate this issue.

References