CVE-2023-52949

—

CVSS 3.1

5.5 medium

EPSS

<1%p7

Published

Sep 26, 2024 (Sep 26, 2024)

Modified

Jun 17, 2026

Description

Missing authentication for critical function vulnerability in proxy settings functionality in Synology Active Backup for Business Agent before 2.7.0-3221 allows local users to obtain user credential via unspecified vectors.

Vendors: synology
Products: active backup for business agent
Weakness: CWE-306
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.2%)

In the news0 stories

No ingested article mentions this CVE yet.