CVE-2025-35031

Katalog CVE

CVSS 5.5 · Medium EPSS 0,14%

Kerentanan Debug Messages Revealing Unnecessary Information pada mieweb enterprise health. Skor CVSS 3.1 5.5 (Medium) menurut NVD.

Deskripsi (NVD)

Medical Informatics Engineering Enterprise Health includes the user's current session token in debug output. An attacker could convince a user to send this output to the attacker, thus allowing the attacker to impersonate that user. This issue is fixed as of 2025-04-08.

Rincian

Terbit di NVD

29 September 2025

Terakhir diubah

9 Oktober 2026

Status NVD

Analyzed

CVSS 3.1

5.5 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-1295: Debug Messages Revealing Unnecessary Information

EPSS (30 hari)

0,14% peluang dieksploitasi; lebih tinggi dari 3,0% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2025/va-25-272-01.json advisory pihak ketiga
• https://www.cve.org/CVERecord?id=CVE-2025-35031 advisory pihak ketiga