CVE-2025-8307 – Recoverable passwords in Asseco Infomedica Plus

CVE ID : CVE-2025-8307

Published : Jan. 8, 2026, 1:43 p.m. | 44 minutes ago

Description : Asseco InfoMedica is a comprehensive solution used to manage both administrative and medical tasks in the healthcare sector. Passwords of all users are stored in a database in an encoded format. An attacker in possession of these encoded passwords is able to decode them by using an algorithm embedded in the client-side part of the software. 
This vulnerability has been fixed in versions 4.50.1 and 5.38.0

Severity: 5.9 | MEDIUM

Visit the link for more details, such as CVSS details, affected products, timeline, and more…