Description
An authentication bypass exists in Arcserve UDP prior to version 9.2. An unauthenticated, remote attacker can obtain a valid authentication identifier that allows them to authenticate to the management console and perform tasks that require authentication.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Arcserve | Arcserve UDP | < 9.2 | 9.2 |
Advisories 1
- WID-SEC-2023-3031 Arcserve Unified Data Protection: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 30, 2023