CVE-2025-30039

Vulnerability Description

Unauthenticated access to the "/cgi-bin/CliniNET.prd/GetActiveSessions.pl" endpoint allows takeover of any user session logged into the system, including users with admin privileges.

Related Weaknesses (CWE)

CWE-306

References

https://cert.pl/en/posts/2025/08/CVE-2025-2313/

FAQ

What is CVE-2025-30039?

CVE-2025-30039 is a documented vulnerability. Unauthenticated access to the "/cgi-bin/CliniNET.prd/GetActiveSessions.pl" endpoint allows takeover of any user session logged into the system, including users with admin privileges.

How severe is CVE-2025-30039?

CVSS scoring is not yet available for CVE-2025-30039. Check NVD for updates.

Is there a patch for CVE-2025-30039?

Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.