Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Advisory: Synology Active Backup for Business Agent — Synology-SA-24:11 Synology Active Backup for Business Agent Clear all filters
TI-2023-29269 CVE-2023-52949 · GHSA-824f-c4fh-gfpc

Missing authentication in Synology Active Backup for Business Agent

Priority LOW 26

Missing authentication for critical function vulnerability in proxy settings functionality in Synology Active Backup for Business Agent before 2.7.0-3221 allows local users to obtain user credential via unspecified vecto…

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00176 Published 2024-09-26 Fixed in 2.7.0-3221 CWE-306
TI-2023-29268 CVE-2023-52948 · GHSA-hrpx-mmq7-fvrq

Missing encryption of sensitive data vulnerability in settings functionality in Synology…

Priority LOW 23

Missing encryption of sensitive data vulnerability in settings functionality in Synology Active Backup for Business Agent before 2.7.0-3221 allows local users to obtain user credential via unspecified vectors.

CVSS 3.1MEDIUM 5.0 Local Low privileges User interaction EPSS 0.00085 Published 2024-09-26 Fixed in 2.7.0-3221 CWE-311
TI-2023-29267 CVE-2023-52947 · GHSA-56mf-38rx-qwp9

Missing authentication in Synology Active Backup for Business Agent

Priority LOW 18

Missing authentication for critical function vulnerability in logout functionality in Synology Active Backup for Business Agent before 2.6.3-3101 allows local users to logout the client via unspecified vectors.

CVSS 3.1MEDIUM 4.0 Local No auth No interaction EPSS 0.00164 Published 2024-09-26 Fixed in 2.7.0-3221 CWE-306
TI-2023-29270 CVE-2023-52950 · GHSA-jhfv-w6h7-38j4

Missing encryption of sensitive data vulnerability in login component in Synology Active…

Priority LOW 25

Missing encryption of sensitive data vulnerability in login component in Synology Active Backup for Business Agent before 2.7.0-3221 allows adjacent man-in-the-middle attackers to obtain user credential via unspecified v…

CVSS 3.1MEDIUM 5.3 Adjacent network No auth No interaction EPSS 0.0008 Published 2024-09-26 Fixed in 2.7.0-3221 CWE-311