Infomedica Plus
Approved changes feed: RSS · Atom
cpe:2.3:a:asseco:infomedica_plus:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Asseco (97f1e0ce-f036-59b9-82c6-4d87d92b4766) |
|---|---|
| Product | Infomedica Plus (28f4b975-f2c7-5ee2-910c-928d21109a19) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-8307 |
vulnerable | 2026-06-08 07:45:19.964165 |
Recoverable passwords in Asseco Infomedica Plus
Asseco InfoMedica is a comprehensive solution used to manage both administrative and medical tasks in the healthcare sector. Passwords of all users are stored in a database in an encoded format. An attacker in possession of these encoded passwords is able to decode them by using an algorithm embedded in the client-side part of the software.
This vulnerability has been fixed in versions 4.50.1 and 5.38.0
Published: 2026-01-08T13:43:37.330Z
Updated: 2026-01-08T14:18:51.530Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-8306 |
vulnerable | 2026-06-08 07:45:19.963793 |
Improper Access Control in Asseco Infomedica Plus
Asseco InfoMedica is a comprehensive solution used to manage both administrative and medical tasks in the healthcare sector. A low privileged user is able to obtain encoded passwords of all other accounts (including main administrator) due to lack of granularity in access control.
Chained exploitation of this vulnerability and CVE-2025-8307 allows an attacker to escalate privileges. This vulnerability has been fixed in versions 4.50.1 and 5.38.0
Published: 2026-01-08T13:43:33.570Z
Updated: 2026-01-08T14:23:20.313Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.