Remote Code Execution in CGM CLININET

Remote Code Execution via Java Deserialization in CGM CLININET

RCE on uhcapache user permissions

Excessive permissions on configuration files containing database logins and passwords

Authenticated RCE with uhcapache privileges in ConvertToPDF

Calling system commands via RunCommand

RCE via Print.pl in uhcPrintServerPrint

Local Privilege Escalation in CGM CLININET

Remote Code Execution in CGM CLININET

Lack of API authentication allowing session generation for any user

Conditional RCE via the "system" function

Missing authentication in APIs returning statistical data along with session IDs

Missing authentication in API returning request logs containing session IDs

Missing authentication in API returning a list of all active sessions

Authentication Bypass via IP Spoofing in CGM CLININET rsyncd

Possibility to generate a session for any user via the "ex:action" parameter after obtaining access to the JWT key

Missing authentication in APIs allowing data retrieval and modification

Stored XSS permitting session takeover of arbitrary user

Code Injection in CGM CLININET

Use of Unsalted MD5 Password Hashes in CGM CLININET

Session generation possible with certificate number only

Insecure Direct Object Reference Message ID

Session ID leakage in Zone.Identifier of downloaded files

Missing Authentication in CGM CLININET

Missing Authentication in CGM CLININET

SQL injection in CheckUnitCodeAndKey.pl

SQL injection in utils/Reporter/OpenReportWindow.pl via the UserID parameter

SQL injection in ReturnUserUnitsXML.pl via the UserID parameter

Authenticated SQL injection in PrepareCDExportJSON.pl

SQL injection in getPatientIdentifier function of PatientService.pl

Insecure File Permissions in CGM CLININET

Lack of protection mechanisms against Clickjacking attacks

Unauthenticated access to module configuration endpoint

Reflected Cross-Site Scripting (XSS) in CGM CLININET

Lack of HTTP Response Headers