CVE-2025-30063

CRITICAL

CGM CLININET < 2024.MS4 - Unprotected Credential Exposure via Configuration File

Title source: llm

The configuration file containing database logins and passwords is readable by any local user.

Core 1

Core References

Various Sources

CVSS v4 9.4

EPSS 0.0013

EPSS Percentile 2.5%

CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

Vulnrichment

Exploitation none

Automatable no

Technical Impact total

CWE

CWE-732

Status published

Products (1)

CGM/CGM CLININET < 2024.MS4

Published Aug 27, 2025

Tracked Since Feb 18, 2026