CVE-2025-35031
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2025
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
Medical Informatics Engineering Enterprise Health includes session token in debug output
Medical Informatics Engineering Enterprise Health includes the user's current session token in debug output. An attacker could convince a user to send this output to the attacker, thus allowing the attacker to impersonate that user. This issue is fixed as of 2025-04-08.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Enterprise Health
- Vendor
- Medical Informatics Engineering
- Product
- Enterprise Health
- Platforms
- Unknown
- Default status
unknown
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| RC202503 | affected | custom | RC202503 2025-04-08 | Unavailable | None listed |
| RC202409 | affected | custom | RC202409 2025-04-08 | Unavailable | None listed |
| RC202403 | affected | custom | RC202403 2025-04-08 | Unavailable | None listed |
| RC202503 2025-04-08 | unaffected | Unavailable | Unavailable | Unavailable | None listed |
| RC202409 2025-04-08 | unaffected | Unavailable | Unavailable | Unavailable | None listed |
| RC202403 2025-04-08 | unaffected | Unavailable | Unavailable | Unavailable | None listed |