VULNERABILITY INTELLIGENCE

CVE-2021-23195

CVSS score5.3 MEDIUM
EPSS probability0.84%
CISA KEVNot currently listed
Published2022-01-21
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Description

Fresenius Kabi Vigilant Software Suite (Mastermed Dashboard) version 2.0.1.3 has the option for automated indexing (directory listing) activated. When accessing a directory, a web server delivers its entire content in HTML form. If an index file does not exist and directory listing is enabled, all content of the directory will be displayed, allowing an attacker to identify and access files on the server.

Weakness classification

  • ics-cert@hq.dhs.gov: CWE-548
  • nvd@nist.gov: CWE-200

Primary references