Live › vulnerability › CVE-2025-30049
Go to dashboardThe CGM CLININET application stores user passwords as unsalted MD5 hashes. An attacker who obtains the password database can recover many passwords quickly, and those credentials can then be reused to log in.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Organisations running CGM CLININET versions before the fixed releases. The sources do not say which deployment modes or configurations are exposed, so the exact exposure path is unknown. Teams not running CLININET can skip it.
No product ranges from the sources yet.
2026.MS1 or 2026.MS3, per the vendor's branch for your installationEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
The CGM CLININET application stores user passwords as unsalted MD5 hashes.
This issue was fixed in versions 2026.MS1 and 2026.MS3
This page as .md · .json · in your agent: get_signal("CVE-2025-30049")
NVD data is provided by NIST and is public domain · EPSS scores by FIRST, used with attribution. Posts quoted belong to their authors.