Security Advisory

CVE-2021-33846

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2022-01-21 18:17:37
Last updated 2025-04-16 18:01:40
Assigner icscert
State PUBLISHED

Description

Fresenius Kabi Vigilant Software Suite (Mastermed Dashboard) version 2.0.1.3 issues authentication tokens to authenticated users that are signed with a symmetric encryption key. An attacker in possession of the key can issue valid JWTs and impersonate arbitrary users.