Description
Asseco ADMX system is used for processing medical records. It allows logged in users to access medical files belonging to other users through manipulation of GET arguments containing document IDs.
This issue has been fixed in 6.09.01.62 version of ADMX.
Published: 2026-01-08
Score: 5.3 Medium
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

No analysis available yet.

Remediation

No remediation available yet.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Thu, 08 Jan 2026 18:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Thu, 08 Jan 2026 15:15:00 +0000

Type Values Removed Values Added
Description Asseco ADMX system is used for processing medical records. It allows logged in users to access medical files belonging to other users through manipulation of GET arguments containing document IDs. This issue has been fixed in 6.09.01.62 version of ADMX.
Title Information disclosure via IDOR in Asseco AMDX
Weaknesses CWE-639
References
Metrics cvssV4_0

{'score': 5.3, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N'}

Subscriptions

No data.

cve-icon MITRE

Status: PUBLISHED

Assigner: CERT-PL

Published:

Updated: 2026-01-08T15:36:32.702Z

Reserved: 2025-05-12T15:49:49.216Z

Link: CVE-2025-4596

cve-icon Vulnrichment

Updated: 2026-01-08T15:36:16.594Z

cve-icon NVD

Status : Awaiting Analysis

Published: 2026-01-08T15:15:43.333

Modified: 2026-01-08T18:08:18.457

Link: CVE-2025-4596

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses