CVE-2023-52948: Medium severity synology active backup for business agent vulnerability
Published Sep 26, 2024
·Updated
Missing encryption of sensitive data vulnerability in settings functionality in Synology Active Backup for Business Agent before 2.7.0-3221 allows local users to obtain user credential via unspecified vectors.
Affected Software
1 affected component
Synology Active Backup for Business Agent<2.7.0-3221
Event History
Sep 26, 2024
CVE Published
via MITRE·03:41 AM
Data Sourced
via MITRE·03:41 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·04:15 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2023-52948?
CVE-2023-52948 has been classified as a medium severity vulnerability due to its potential impact on sensitive data exposure.
2
How do I fix CVE-2023-52948?
To address CVE-2023-52948, update Synology Active Backup for Business Agent to version 2.7.0-3221 or later.
3
What type of data is affected by CVE-2023-52948?
CVE-2023-52948 affects sensitive user credential data due to missing encryption.
4
Who is vulnerable to CVE-2023-52948?
CVE-2023-52948 impacts local users of Synology Active Backup for Business Agent versions earlier than 2.7.0-3221.
5
What functionality is compromised by CVE-2023-52948?
CVE-2023-52948 compromises the settings functionality within Synology Active Backup for Business Agent.