Medium · 5.0 CVE-2023-52948 EUVD-2023-59632GHSA-hrpx-mmq7-fvrq

Missing encryption of sensitive data vulnerability in settings functionality in Synology Active Backup for Business Agent before 2.7.0-3221…

Published Sep 26, 2024 · Updated Nov 15, 2024 · Assigned by synology

Vendor: Synology Product: Synology Active Backup for Business Agent

Description

Missing encryption of sensitive data vulnerability in settings functionality in Synology Active Backup for Business Agent before 2.7.0-3221 allows local users to obtain user credential via unspecified vectors.

Affected products

Vendor	Product	Affected	Fixed
Synology	Synology Active Backup for Business Agent	< 2.7.0-3221	2.7.0-3221

References

Synology-SA-24:11 Synology Active Backup for Business Agent vendor-advisory