Asseco ADMX system is used for processing medical records. It allows logged in users to access medical files belonging to other users through manipulation of GET arguments containing document IDs.
This issue has been fixed in 6.09.01.62 version of ADMX.
CVSS
No CVSS.
References
| Link | Resource |
|---|---|
| https://cert.pl/en/posts/2026/01/CVE-2025-4596 |
Configurations
No configuration.
History
08 Jan 2026, 15:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-01-08 15:15
Updated : 2026-01-08 18:08
NVD link : CVE-2025-4596
Mitre link : CVE-2025-4596
CVE.ORG link : CVE-2025-4596
JSON object : View
Products Affected
No product.
CWE
CWE-639
Authorization Bypass Through User-Controlled Key