low3.3
CVE-2025-35031
Medical Informatics Engineering Enterprise Health includes the user's current session token in debug output.
Impact
Medical Informatics Engineering Enterprise Health includes the user's current session token in debug output. An attacker could convince a user to send this output to the attacker, thus allowing the attacker to impersonate that user. This issue is fixed as of 2025-04-08.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mieweb | Enterprise Health | Versions rc202403, rc202409, rc202503 |