CVE-2021-33846

Name of the Vulnerable Software and Affected Versions Fresenius Kabi Vigilant Software Suite (Mastermed Dashboard) version 2.0.1.3

Description The issue allows an attacker in possession of a symmetric encryption key to issue valid JWTs and impersonate arbitrary users, as the authentication tokens issued to authenticated users are signed with this key.

Recommendations For Fresenius Kabi Vigilant Software Suite (Mastermed Dashboard) version 2.0.1.3, consider restricting access to sensitive areas of the system until a patch is available, and ensure that all symmetric encryption keys are securely stored and protected from unauthorized access. At the moment, there is no information about a newer version that contains a fix for this vulnerability.