Medical Informatics Engineering Enterprise Health includes the user's current session token in debug output. An attacker could convince a user to send this output to the attacker, thus allowing the a…

Low CVSS 3.3

CVECVE-2025-35031

First seen2026-10-09 10:16 UTC

Disclosed2025-09-29 20:15 UTC

Last updated2026-10-09 10:16 UTC

Channel statusauto

Summary

Medical Informatics Engineering Enterprise Health includes the user's current session token in debug output. An attacker could convince a user to send this output to the attacker, thus allowing the attacker to impersonate that user. This issue is fixed as of 2025-04-08.

In-depth triage

No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).

Affected products

Sources

NVD DATABASE

Original Links

https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2025/va-25-272-01.json Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2025-35031 Third Party Advisory

Timeline

2026-10-09 nvd_ingest NVD