Skip to content
OpenAdvisories
Medium · 5.3 CVE-2023-52950 EUVD-2023-59634GHSA-jhfv-w6h7-38j4

Missing encryption of sensitive data vulnerability in login component in Synology Active Backup for Business Agent before 2.7.0-3221 allows…

Published Sep 26, 2024 · Updated Nov 15, 2024 · Assigned by synology

Vendor: Synology Product: Synology Active Backup for Business Agent

Description

Missing encryption of sensitive data vulnerability in login component in Synology Active Backup for Business Agent before 2.7.0-3221 allows adjacent man-in-the-middle attackers to obtain user credential via unspecified vectors.

Affected products

VendorProductAffectedFixed
Synology Synology Active Backup for Business Agent < 2.7.0-3221 2.7.0-3221

References