PT-2026-1959 · Asseco · Asseco Infomedica

Maciej Kazulak · CVE-2025-8307 · Published 2026-01-08 · Updated 2026-01-08

Positive Technologies (AI Summary)

CVSS v4.0

5.9

Medium

Base vector

AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions Asseco InfoMedica versions prior to 4.50.1 Asseco InfoMedica versions prior to 5.38.0

Description Asseco InfoMedica stores user passwords in an encoded format within a database. An attacker with access to these encoded passwords can decode them using an algorithm present in the client-side software.

Recommendations Update to version 4.50.1 or later. Update to version 5.38.0 or later.

Fix

Weakness Enumeration

CWE-257

Related Identifiers

CVE-2025-8307

Affected Products

Asseco Infomedica

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2025-8307 · Security Note
• https://t.me/cveNotify/148080 · Telegram Post
• https://twitter.com/CVEnew/status/2009269783343321255 · Twitter Post
• https://t.me/CVEtracker/41715 · Telegram Post
• https://cert.pl/en/posts/2026/01/CVE-2025-8306 · Note
• https://t.me/CVEtracker/41716 · Telegram Post