critical9.8
CVE-2023-41999
An authentication bypass exists in Arcserve UDP prior to version 9.2.
Impact
An authentication bypass exists in Arcserve UDP prior to version 9.2. An unauthenticated, remote attacker can obtain a valid authentication identifier that allows them to authenticate to the management console and perform tasks that require authentication.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Arcserve | Udp | before 9.2 |