CVE-2025-30049EUVD-2025-211179
Use of Unsalted MD5 Password Hashes in CGM CLININET
- Published
- Last modified
- Status
- published
- Known exploitation
- Not listed in CISA KEV
- Public exploit
- None on Exploit-DB
Summary
The CGM CLININET clinical software stores user passwords using unsalted MD5 hashes, which are weak and easy to crack. An attacker who obtains the stored password data could potentially recover user passwords and gain unauthorized access to the application.
Summarized by anthropic/claude-haiku-5.5. Verify details against the original sources.
Read the original description
The CGM CLININET application stores user passwords as unsalted MD5 hashes. This issue was fixed in versions 2026.MS1 and 2026.MS3
Affected versions
- CGM CGM CLININET
fixed in 2026.MS1; fixed in 2026.MS3