Asseco InfoMedica Plus Insufficient Access Control Vulnerability Allowing Password Retrieval and Privilege Escalation

A vulnerability exists in Asseco InfoMedica Plus versions 4.0.0 prior to 4.50.1 and 5.0.0 prior to 5.38.0, allowing low privileged users to access encoded passwords of other accounts, including the main administrator. This issue arises from inadequate access control granularity. Additionally, passwords are stored in a recoverable format, enabling decoding by an attacker with access to these encoded passwords. The combined exploitation of this vulnerability with CVE-2025-8307 facilitates privilege escalation.

Impact

Exploitation of this vulnerability allows for unauthorized access to encoded passwords of all users, including administrators, which can be decoded and potentially used for privilege escalation.

Remediation

Users can upgrade to Asseco InfoMedica Plus versions 4.50.1 or 5.38.0 to address this vulnerability.