Signal is active with 3 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
The CGM CLININET application uses direct, sequential object identifiers "MessageID" without proper authorization checks. By modifying the parameter in the GET request, an attacker can access messages and attachments belonging to other users.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2025-58402 Insecure Direct Object Reference Vulnerability in CGM CLININET Messaging System https://vulmon.com/vulnerabilitydetails?qid=CVE-2025-58402
Post summary
A new insecure direct object reference vulnerability (CVE-2025-58402) has been identified in the CGM CLININET Messaging System, with details available on Vulmon.
🚨*CVE* CVE-2025-58402 The CGM CLININET application uses direct, sequential object identifiers "MessageID" without proper authorization checks. By modifying the parameter in the GET request… https://www.cve.org/CVERecord?id=CVE-2025-58402 ----- Traducción: CVE-2025-58402 La … http://infoflow.cloud`
Post summary
The post announces CVE-2025-58402, detailing that CGM CLININET’s sequential MessageID identifiers lack proper authorization checks, allowing unauthorized access through GET parameter manipulation.
CVE-2025-58402 The CGM CLININET application uses direct, sequential object identifiers "MessageID" without proper authorization checks. By modifying the parameter in the GET request… https://www.cve.org/CVERecord?id=CVE-2025-58402
Post summary
The post discloses that CGM CLININET’s MessageID parameter is insecure due to missing authorization checks, allowing potential unauthorized access by manipulating the GET request.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | cgm | clininet | - | - | - |