CVE-2025-30051
Insecure File Permissions in CGM CLININET
CGM CGM CLININET
CVSS
6.8MediumExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.10%Chance of exploitation activity in the next 30 days, higher than 0% of CVEs. Scored 23 Oct 2026FIRST EPSS
What fixes it
- 2026.MS3CGM CLININETCVE List
A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.
Description
The CGM CLININET application stores the production database login and password, as well as RabbitMQ broker credentials, in the SysIO.pl configuration file. Insecure file permissions make this file readable by any local account.
This issue was fixed in version 2026.MS3
Text from CVE List
Affected versions 1
- CGM CLININETaffected: all versions before 2026.MS3CVE List