CVE-2025-8307CWE-257

CVE-2025-8307

published January 8, 2026

CVSS
5.9
EPSS
0%
Percentile
1.9
In the wild
Unconfirmed
What it is

Asseco InfoMedica is a comprehensive solution used to manage both administrative and medical tasks in the healthcare sector. Passwords of all users are stored in a database in an encoded format. An attacker in possession of these encoded passwords is able to decode them by using an algorithm embedded in the client-side part of the software.

This vulnerability has been fixed in versions 4.50.1 and 5.38.0

The record
Technical detail
CVSS
5.9 · NONE
CVSS v4.0
Not supplied
EPSS
0.00123 · 1.9th percentile
Weakness
CWE-257 · Storing Passwords in a Recoverable Format
Published
2026-01-08T19:15Z
References (1)
EPSS history
Timeline
  • 08 JAN 13:43Z
    Recoverable passwords in Asseco Infomedica Plus
    cvelistv5