Fresenius Kabi Agilia Link + version 3.0 does not enforce...
High severity
Unreviewed
Published
Jan 22, 2022
to the GitHub Advisory Database
•
Updated Feb 3, 2023
Description
Published by the National Vulnerability Database
Jan 21, 2022
Published to the GitHub Advisory Database
Jan 22, 2022
Last updated
Feb 3, 2023
Fresenius Kabi Agilia Link + version 3.0 does not enforce transport layer encryption. Therefore, transmitted data may be sent in cleartext. Transport layer encryption is offered on Port TCP/443, but the affected service does not perform an automated redirect from the unencrypted service on Port TCP/80 to the encrypted service.
References