PT-2026-1959 · Asseco · Asseco Infomedica

Maciej Kazulak · Publicado 2026-01-08 · Atualizado 2026-01-08 · CVE-2025-8307

Positive Technologies (AI Summary)

CVSS v4.0

5.9

Média

Vetor base

AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions Asseco InfoMedica versions prior to 4.50.1 Asseco InfoMedica versions prior to 5.38.0

Description Asseco InfoMedica stores user passwords in an encoded format within a database. An attacker with access to these encoded passwords can decode them using an algorithm present in the client-side software.

Recommendations Update to version 4.50.1 or later. Update to version 5.38.0 or later.

Correção

Enumeração de Fraquezas

CWE-257

Identificadores relacionados

CVE-2025-8307

Produtos afetados

Asseco Infomedica

Referências · 6

• https://t.me/cveNotify/148080 · Publicação no Telegram
• https://twitter.com/CVEnew/status/2009269783343321255 · Publicação no Twitter
• https://t.me/CVEtracker/41715 · Publicação no Telegram
• https://cert.pl/en/posts/2026/01/CVE-2025-8306 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2025-8307 · Nota de Segurança
• https://t.me/CVEtracker/41716 · Publicação no Telegram