Vulnerability Description
The CGM CLININET application stores the production database login and password, as well as RabbitMQ broker credentials, in the SysIO.pl configuration file. Insecure file permissions make this file readable by any local account. This issue was fixed in version 2026.MS3
Related Weaknesses (CWE)
References
- https://cert.pl/en/posts/2026/10/CVE-2025-30043/
- https://www.cgm.com/pol_pl/products/szpital/cgm-clininet.html
FAQ
What is CVE-2025-30051?
CVE-2025-30051 is a documented vulnerability. The CGM CLININET application stores the production database login and password, as well as RabbitMQ broker credentials, in the SysIO.pl configuration file. Insecure file permissions make this file rea...
How severe is CVE-2025-30051?
CVSS scoring is not yet available for CVE-2025-30051. Check NVD for updates.
Is there a patch for CVE-2025-30051?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.