Arcserve UDP Management Authentication Bypass

CVE-2023-41999

What is CVE-2023-41999?

An authentication bypass vulnerability exists in Arcserve UDP prior to version 9.2, enabling unauthenticated remote attackers to generate a valid authentication identifier. Once exploited, this allows unauthorized access to the management console, granting the attacker the ability to execute actions that typically require authentication privileges.

References