Skip to content
OpenAdvisories
Medium · 5.3 CVE-2025-30048 EUVD-2025-27769GHSA-gr5x-c397-2389

Unauthenticated access to module configuration endpoint

Published Aug 27, 2025 · Updated Aug 27, 2025 · Assigned by CERT-PL

Description

The "serverConfig" endpoint, which returns the module configuration including credentials, is accessible without authentication.

Affected products

VendorProductAffectedFixed
CGM CGM CLININET < 2025.MS2 2025.MS2

References