What is GHSA-6j7m-7j95-73q6?

GHSA-6j7m-7j95-73q6 is a security advisory published by GitHub Security Advisories with Medium severity. The CGM CLININET application stores the production database login and password, as well as...

Which CVE IDs does GHSA-6j7m-7j95-73q6 cover?

GHSA-6j7m-7j95-73q6 covers the following CVE IDs: CVE-2025-30051. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

GHSA-6j7m-7j95-73q6Medium

The CGM CLININET application stores the production database login and password, as well as...

Vendor

GitHub Security Advisories

Published

October 23, 2026

Last Modified

October 23, 2026

🔗 CVE IDs covered (1)

CVE-2025-30051 →

📋 Description

The CGM CLININET application stores the production database login and password, as well as RabbitMQ broker credentials, in the SysIO.pl configuration file. Insecure file permissions make this file readable by any local account.

This issue was fixed in version 2026.MS3

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2025-30051
https://cert.pl/en/posts/2026/10/CVE-2025-30043
https://www.cgm.com/pol_pl/products/szpital/cgm-clininet.html
https://github.com/advisories/GHSA-6j7m-7j95-73q6