CVE-2025-30049: Use of Unsalted MD5 Password Hashes in CGM CLININET

Published Oct 23, 2026

Updated

The CGM CLININET application stores user passwords as unsalted MD5 hashes.

This issue was fixed in versions 2026.MS1 and 2026.MS3

Affected Software

1 affected component

CGM CLININET

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade CGM CLININET to a version that resolves this vulnerability.
Fixed in 2026.MS1
Upgrade
Upgrade CGM CLININET to a version that resolves this vulnerability.
Fixed in 2026.MS3

Event History

Oct 23, 2026

CVE Published

via MITRE·08:22 AM

Data Sourced

via MITRE·08:22 AM

DescriptionWeakness

Frequently Asked Questions

Which versions should be remediated?

The issue is fixed in CGM CLININET versions 2026.MS1 and 2026.MS3. Versions other than those identified as fixed should be reviewed for exposure.

What is the practical risk of unsalted MD5 password storage?

Unsalted MD5 hashes can be cracked more easily than modern salted password hashes, particularly when users choose common or reused passwords. An attacker would need access to the stored password hashes to attempt offline cracking.

CVE-2025-30049: Use of Unsalted MD5 Password Hashes in CGM CLININET

Affected Software

Remediation

Event History

Frequently Asked Questions

Which versions should be remediated?

What is the practical risk of unsalted MD5 password storage?

Company

Resources

Contact

Frequently Asked Questions

Which versions should be remediated?

What is the practical risk of unsalted MD5 password storage?