CNNVD-202510-3839 Information

CNNVD ID

CNNVD-202510-3839

CVE-2025-9313

  • CNNVD Published: 2025-10-28

Description (Chinese)

Asseco mMedica是波兰Asseco公司的一款医疗信息管理系统。 Asseco mMedica 11.9.5之前版本存在安全漏洞,该漏洞源于未经验证的用户可利用mmBackup应用程序绕过认证机制,可能导致未经授权的数据库访问。

Description (English)

Asseco Médica is a medical information management system of the Polish company Asseco. There was a security loophole in the pre-Asseco mMedica 11.9.5, which stemmed from uncertified users using the mmBackup application to bypass the authentication mechanism, which could lead to unauthorized database access.

Hazard Level

Low

Vulnerability Type

其他

Affected Vendor

Asseco

Published

2025-10-28

Last Modified

2026-02-24

References

https://mmedica.asseco.pl/ https://cert.pl/en/posts/2025/10/CVE-2025-9313/ https://access.redhat.com/security/cve/cve-2025-9313

Share on: