Missing authentication for critical function vulnerability in proxy settings functionality in Synology Active Backup for Business Agent before 2.7.0-3221 allows local users to obtain user credential via unspecified vectors.
Metrics
Affected Vendors & Products
References
History
Thu, 26 Sep 2024 15:30:00 +0000
Type | Values Removed | Values Added |
---|---|---|
First Time appeared |
Synology
Synology active Backup For Business |
|
CPEs | cpe:2.3:a:synology:active_backup_for_business:*:*:*:*:*:*:*:* | |
Vendors & Products |
Synology
Synology active Backup For Business |
|
Metrics |
ssvc
|
Thu, 26 Sep 2024 04:00:00 +0000
Type | Values Removed | Values Added |
---|---|---|
Description | Missing authentication for critical function vulnerability in proxy settings functionality in Synology Active Backup for Business Agent before 2.7.0-3221 allows local users to obtain user credential via unspecified vectors. | |
Weaknesses | CWE-306 | |
References |
| |
Metrics |
cvssV3_1
|
MITRE
Status: PUBLISHED
Assigner: synology
Published: 2024-09-26T03:42:35.862Z
Updated: 2024-09-26T14:36:39.129Z
Reserved: 2024-09-24T08:35:52.122Z
Link: CVE-2023-52949
Vulnrichment
Updated: 2024-09-26T14:36:32.108Z
NVD
Status : Awaiting Analysis
Published: 2024-09-26T04:15:06.550
Modified: 2024-09-26T13:32:02.803
Link: CVE-2023-52949
Redhat
No data.