Description
Asseco InfoMedica is a comprehensive solution used to manage both administrative and medical tasks in the healthcare sector. Passwords of all users are stored in a database in an encoded format. An attacker in possession of these encoded passwords is able to decode them by using an algorithm embedded in the client-side part of the software.
This vulnerability has been fixed in versions 4.50.1 and 5.38.0
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Asseco | InfoMedica Plus | 5.0.0 – < 5.38.0, 4.0.0 – < 4.50.1 | 5.38.0 |
References
- https://cert.pl/en/posts/2026/01/CVE-2025-8306/ third-party-advisory