Skip to content
OpenAdvisories
Medium · 4.0 CVE-2023-52947 EUVD-2023-59631GHSA-56mf-38rx-qwp9

Missing authentication for critical function vulnerability in logout functionality in Synology Active Backup for Business Agent before 2.6.…

Published Sep 26, 2024 · Updated Sep 26, 2024 · Assigned by synology

Description

Missing authentication for critical function vulnerability in logout functionality in Synology Active Backup for Business Agent before 2.6.3-3101 allows local users to logout the client via unspecified vectors. The backup functionality will continue to operate and will not be affected by the logout.

Affected products

VendorProductAffectedFixed
Synology Synology Active Backup for Business Agent < 2.7.0-3221 2.7.0-3221

References