CVE-2025-4596 — Information disclosure via IDOR in Asseco AMDX
Asseco ADMX system is used for processing medical records. It allows logged in users to access medical files belonging to other users through manipulation of GET arguments conta…
Published: 2026-01-08 · CVSS: 5.3 · CVSS 4.0
Asseco ADMX system is used for processing medical records. It allows logged in users to access medical files belonging to other users through manipulation of GET arguments containing document IDs. This issue has been fixed in 6.09.01.62 version of ADMX.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7