CVE-2025-30051
CVE-2025-30051 · Insecure File Permissions in CGM CLININET
This page contains facts from public vulnerability sources. Check the original advisory before updating.
The CGM CLININET application stores the production database login and password, as well as RabbitMQ broker credentials, in the SysIO.pl configuration file. Insecure file permissions make this file readable by any local account. This issue was fixed in version 2026.MS3
CVSS 6.8 · Medium · EPSS 0.1% · Fix available
- Published
- Updated
Affected products and versions
cgm clininet
- Versions
- ≥ 0, < 2026.MS3: Affected (custom)
Update to 2026.MS3