CVE-2021-23195

MEDIUM Year: 2021
CVSS v3 Score
5.3
Medium
CVSS v2 Score
5.0
Medium
Weakness Type
CWE-548
View all →

Vulnerability Description

Fresenius Kabi Vigilant Software Suite (Mastermed Dashboard) version 2.0.1.3 has the option for automated indexing (directory listing) activated. When accessing a directory, a web server delivers its entire content in HTML form. If an index file does not exist and directory listing is enabled, all content of the directory will be displayed, allowing an attacker to identify and access files on the server.

Related Vulnerabilities

CVE-2014-125069

MEDIUM
CVSS:5.3(Medium)

A vulnerability was found in saxman maps-js-icoads. It has been classified as problematic. Affected is an unknown function. The manipulation leads to exposure of information through directory listing....

CWE-5482014

CVE-2019-5437

MEDIUM
CVSS:5.3(Medium)

Information exposure through the directory listing in npm's harp module allows to access files that are supposed to be ignored according to the harp server rules.Vulnerable versions are <= 0.29.0 and ...

CWE-5482019

CVE-2020-15081

MEDIUM
CVSS:5.3(Medium)

In PrestaShop from version 1.5.0.0 and before 1.7.6.6, there is information exposure in the upload directory. The problem is fixed in version 1.7.6.6. A possible workaround is to add an empty index.ph...

CWE-5482020

CVE-2020-15790

MEDIUM
CVSS:5.3(Medium)

A vulnerability has been identified in Spectrum Power 4 (All versions < V4.70 SP8). If configured in an insecure manner, the web server might be susceptible to a directory listing attack.

CWE-5482020

CVE-2021-32515

MEDIUM
CVSS:5.3(Medium)

Directory listing vulnerability in share_link in QSAN Storage Manager allows attackers to list arbitrary directories and further access credential information. The referred vulnerability has been solv...

CWE-5482021

CVE-2022-30625

MEDIUM
CVSS:5.3(Medium)

Directory listing is a web server function that displays the directory contents when there is no index file in a specific website directory. A directory listing provides an attacker with the complete ...

CWE-5482022