Description (CNA)
An attacker with physical access to the host can extract the secrets from the registry and create valid JWT tokens for the Fresenius Kabi Vigilant MasterMed version 2.0.1.3 application and impersonate arbitrary users. An attacker could manipulate RabbitMQ queues and messages by impersonating users.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Fresenius Kabi / Vigilant Software Suite (Mastermed Dashboard) | affected unspecified before 2.0.1.3 |
| Fresenius Kabi / Agilia Partner | affected unspecified before 3.0 |
CWE
CWE-256
References
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.