Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2021-23195

Fresenius Kabi Agilia Connect Infusion System exposure of information through directory listing

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
icscert

Description

Fresenius Kabi Vigilant Software Suite (Mastermed Dashboard) version 2.0.1.3 has the option for automated indexing (directory listing) activated. When accessing a directory, a web server delivers its entire content in HTML form. If an index file does not exist and directory listing is enabled, all content of the directory will be displayed, allowing an attacker to identify and access files on the server.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Fresenius Kabi Vigilant Software Suite (Mastermed Dashboard)

  • unspecified to < 2.0.1.3affected

References