CVE-2025-2265 Santesoft Sante PACS Server HTTP.db SHA1 Hash Truncation
Truncated SHA1 hashes in Sante PACS Server allow attackers to bypass authentication by exploiting zero-byte padding issues.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2025-2265?
CVE-2025-2265 is a high-severity vulnerability in Santesoft Sante PACS Server, published on 13 Mar 2025. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
The password of a web user in "Sante PACS Server.exe" is zero-padded to 0x2000 bytes, SHA1-hashed, base64-encoded, and stored in the USER table in the SQLite database HTTP.db. However, the number of hash bytes encoded and stored is truncated if the hash contains a zero byte
Weakness: CWE-916
Which versions are affected by CVE-2025-2265?
How do I fix CVE-2025-2265?
No fix has been published for CVE-2025-2265 yet. Limit exposure of the affected software until one is available.
Is CVE-2025-2265 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2025-2265 exists.
Sources
Also known as GHSA-m79q-pm7q-qcrg.