CVE-2023-52947
MEDIUMSynology Active Backup for Business Agent < 2.6.3-3101 - Unauthenticated Logout via Local Attack
Title source: llmDescription
Missing authentication for critical function vulnerability in logout functionality in Synology Active Backup for Business Agent before 2.6.3-3101 allows local users to logout the client via unspecified vectors. The backup functionality will continue to operate and will not be affected by the logout.
References (1)
Core 1
Core References
Vendor Advisory vendor-advisory
https://www.synology.com/en-global/security/advisory/Synology_SA_24_11
Scores
CVSS v3
4.0
EPSS
0.0015
EPSS Percentile
35.4%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
no
Technical Impact
partial
Details
CWE
CWE-306
Status
published
Products (1)
synology/active_backup_for_business_agent
< 2.6.0-3101
Published
Sep 26, 2024
Tracked Since
Feb 18, 2026