CVE-2025-30063
BaseFortify
Publication date: 2025-08-27
Last updated on: 2025-08-29
Assigner: CERT.PL
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| cgm | clininet | 2025.ms2 |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-732 | The product specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability occurs because the configuration file that contains database login credentials, including usernames and passwords, is accessible and readable by any local user on the system. This means unauthorized users with local access can obtain sensitive database authentication information.
How can this vulnerability impact me? :
If exploited, this vulnerability can lead to unauthorized access to the database by local users who should not have such privileges. This can result in data breaches, data manipulation, or other malicious activities affecting the confidentiality, integrity, and availability of the database and its data.