high7.3
CVE-2021-23196
The web application on Agilia Link+ version 3.0 implements authentication and session management mechanisms exclusively on the client-side and does not protect…
Impact
The web application on Agilia Link+ version 3.0 implements authentication and session management mechanisms exclusively on the client-side and does not protect authentication attributes sufficiently.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Fresenius-Kabi | Agilia Connect Firmware | through d25 |
| Fresenius-Kabi | Agilia Partner Maintenance Software | through 3.3.0 |
| Fresenius-Kabi | Vigilant Centerium | Version 1.0 |
| Fresenius-Kabi | Vigilant Insight | Version 1.0 |
| Fresenius-Kabi | Vigilant Mastermed | Version 1.0 |
| Fresenius-Kabi | Link\+ Agilia Firmware | before 3.0 Version 3.0 |