Vulnerability · Published Aug 27, 2025 · Assigned by CERT-PL
CVE-2025-30064Possibility to generate a session for any user via the "ex:action" parameter after obtaining access to the JWT key
High 8.8
In plain English
A high-severity security flaw in CGM CLININET from CGM. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.1% (higher than 0% of all known vulnerabilities).
Severity (CVSS 4.0)8.8High
Exploit odds (30 days)<0.1%top 99.7% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
An insufficiently secured internal function allows session generation for arbitrary users. The decodeParam function checks the JWT but does not verify which signing algorithm was used. As a result, an attacker can use the "ex:action" parameter in the VerifyUserByThrustedService function to generate a session for any user.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| CGM | CGM CLININET | 0 – before 2025.MS2 |
Weakness: CWE-912, CWE-347 · Vector: CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H