Description
The "serverConfig" endpoint, which returns the module configuration including credentials, is accessible without authentication.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| CGM | CGM CLININET | < 2025.MS2 | 2025.MS2 |
Published Aug 27, 2025 · Updated Aug 27, 2025 · Assigned by CERT-PL
The "serverConfig" endpoint, which returns the module configuration including credentials, is accessible without authentication.
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| CGM | CGM CLININET | < 2025.MS2 | 2025.MS2 |