CVE-2023-52950: Medium severity synology active backup for business agent vulnerability
Published Sep 26, 2024
·Updated
Missing encryption of sensitive data vulnerability in login component in Synology Active Backup for Business Agent before 2.7.0-3221 allows adjacent man-in-the-middle attackers to obtain user credential via unspecified vectors.
Affected Software
1 affected component
Synology Active Backup for Business Agent<2.7.0-3221
Event History
Sep 26, 2024
CVE Published
via MITRE·03:40 AM
Data Sourced
via MITRE·03:40 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·04:15 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2023-52950?
CVE-2023-52950 is considered a medium severity vulnerability due to potential exposure of user credentials.
2
How do I fix CVE-2023-52950?
To fix CVE-2023-52950, update Synology Active Backup for Business Agent to version 2.7.0-3221 or later.
3
What systems are affected by CVE-2023-52950?
CVE-2023-52950 affects all versions of Synology Active Backup for Business Agent prior to 2.7.0-3221.
4
What is the impact of CVE-2023-52950?
The impact of CVE-2023-52950 is that adjacent man-in-the-middle attackers can potentially obtain user credentials.
5
Is there a workaround for CVE-2023-52950?
There is no official workaround for CVE-2023-52950; updating to a secure version is recommended.