---
id: "CVE-2025-30051"
kind: "vulnerability"
aliases: ["CVE-2025-30051"]
title: "CGM CLININET: database and RabbitMQ credentials readable by any local account"
severity: "medium"
cvss: 6.8
epss: 0.00098
exploited: false
status: "open"
category: "other"
products: []
ecosystems: []
tags: ["cgm-clininet", "healthcare-it", "on-prem", "other"]
not_affected_if: ["fixed-version-2026.ms3", "single-user-host"]
published_at: "2026-10-23T09:17:04+00:00"
first_seen_at: "2026-10-23T21:57:32+00:00"
updated_at: "2026-10-25T03:42:36+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-30051", "first_seen_at": "2026-10-23T21:57:32+00:00"}, {"source": "epss", "url": "https://api.first.org/data/v1/epss?cve=CVE-2025-30051", "first_seen_at": "2026-10-24T07:15:51+00:00"}]
---

# CGM CLININET: database and RabbitMQ credentials readable by any local account

CGM CLININET stores the production database login and password, plus RabbitMQ broker credentials, in the SysIO.pl configuration file. Insecure file permissions let any local account read those credentials.

_Summary, check and fix written by a model from the sources; labelled as such._

## Fix

- Upgrade CGM CLININET to `2026.MS3` or later.
- Until then, restrict read access to SysIO.pl so only the service account can read it (the sources do not give the exact path or command).

## Timeline

- 2026-10-23T21:57:32+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2025-30051
- 2026-10-24T07:15:51+00:00 epss https://api.first.org/data/v1/epss?cve=CVE-2025-30051

## From the sources

The CGM CLININET application stores the production database login and password, as well as RabbitMQ broker credentials, in the SysIO.pl configuration file. Insecure file permissions make this file readable by any local account. 


This issue was fixed in version 2026.MS3

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_