Live › vulnerability › CVE-2025-30051
Go to dashboardCGM CLININET stores the production database login and password, plus RabbitMQ broker credentials, in the SysIO.pl configuration file. Insecure file permissions let any local account read those credentials.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Installations of CGM CLININET older than 2026.MS3 where the SysIO.pl file is readable by local users. An attacker needs a local account on the host to read the stored credentials, and the sources do not say whether the database or broker is reachable from outside. Sites that have already upgraded to 2026.MS3 are not affected.
No product ranges from the sources yet.
Unknown from the sources.
2026.MS3 or later.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
The CGM CLININET application stores the production database login and password, as well as RabbitMQ broker credentials, in the SysIO.pl configuration file. Insecure file permissions make this file readable by any local account.
This issue was fixed in version 2026.MS3
This page as .md · .json · in your agent: get_signal("CVE-2025-30051")
NVD data is provided by NIST and is public domain · EPSS scores by FIRST, used with attribution. Posts quoted belong to their authors.