Back to Database
Status published
Medium
CVE-2025-4596
Information disclosure via IDOR in Asseco AMDX
Vulnerability Description
Asseco ADMX system is used for processing medical records. It allows logged in users to access medical files belonging to other users through manipulation of GET arguments containing document IDs. This issue has been fixed in 6.09.01.62 version of ADMX.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-4596
Credits & Attribution
The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:
- Wiktor Mróz
Affected Vendor
Asseco
View all reports →Affected Software
AMDX
Vulnerable Versions:
0
Timeline
Official Publish:
January 8th, 2026
Last Modified:
January 8th, 2026
Added to House:
July 22nd, 2026