CVE-2025-30038: Session ID leakage in Zone.Identifier of downloaded files
The vulnerability consists of a session ID leak when saving a file downloaded from CGM CLININET. The identifier is exposed through a built-in Windows security feature that stores additional metadata in an NTFS alternate data stream (ADS) for all files downloaded from potentially untrusted sources.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-30038?
CVE-2025-30038 is considered a medium severity vulnerability due to the potential for session ID leakage.
How do I fix CVE-2025-30038?
To mitigate CVE-2025-30038, ensure that files downloaded from CGM CLININET are handled securely and consider applying security updates from Microsoft.
What types of systems are affected by CVE-2025-30038?
CVE-2025-30038 affects systems running Microsoft Windows and CGM CLININET software.
What data is exposed in CVE-2025-30038?
CVE-2025-30038 exposes session IDs through NTFS alternate data streams when files are downloaded.
Is there a known exploit for CVE-2025-30038?
As of now, there are no publicly known exploits specifically targeting CVE-2025-30038.