CGM CLININET Session ID Leak Vulnerability via NTFS Alternate Data Stream

A vulnerability has been identified in CGM CLININET, all versions prior to 2025.MS1, involving the unintentional exposure of session IDs. This leak occurs when files are downloaded from CGM CLININET, as the session ID is stored in an NTFS alternate data stream (ADS) due to a Windows security feature that adds metadata to files downloaded from untrusted sources.

Impact

Exploitation of this vulnerability leads to the unintentional disclosure of session IDs, which could be used to hijack user sessions.