{"id":"CVE-2025-30051","title":"Insecure File Permissions in CGM CLININET","summary":"The CGM CLININET application stores the production database login and password, as well as RabbitMQ broker credentials, in the SysIO.pl configuration file. Insecure file permissions make this file readable by any local account. \n\n\nThis i…","severity":"medium","cvss":6.8,"cvssVector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N","cvssSource":"cna","cwe":["CWE-732"],"vendor":"CGM","product":"CGM CLININET","affected":["clininet < 2026.MS3"],"published":"2026-10-23","updated":"2026-10-23","sourceUpdated":"2026-10-23T08:22:57.889Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2025-30051","references":[{"url":"https://cert.pl/en/posts/2026/10/CVE-2025-30043/"},{"url":"https://www.cgm.com/pol_pl/products/szpital/cgm-clininet.html"}],"tags":["cve.org"],"ingestedAt":"2026-10-23T09:20:44.062Z","slug":"CVE-2025-30051","body":"## Overview\n\nThe CGM CLININET application stores the production database login and password, as well as RabbitMQ broker credentials, in the SysIO.pl configuration file. Insecure file permissions make this file readable by any local account. \n\n\nThis issue was fixed in version 2026.MS3\n\n## Affected\n\n- `clininet < 2026.MS3`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":37,"depthScoreParts":{"impact":37.4,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}