Description
The CGM CLININET application stores user passwords as unsalted MD5 hashes.
This issue was fixed in versions 2026.MS1 and 2026.MS3
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| CGM | CGM CLININET | < 2026.MS1, < 2026.MS3 | 2026.MS1 |
References
- https://cert.pl/en/posts/2026/10/CVE-2025-30043/ third-party-advisory
- https://www.cgm.com/pol_pl/products/szpital/cgm-clininet.html product