Authentication Bypass Vulnerability in Arcserve Unified Data Protection

CVE-2025-34520

What is CVE-2025-34520?

This vulnerability in Arcserve Unified Data Protection allows attackers to exploit specific request parameters to bypass authentication mechanisms. As a result, unauthorized users can gain access to protected functionalities and potentially compromise user accounts. All versions prior to 10.2 are impacted, and while version 10.2 includes the necessary security patches, users of versions 8.0 through 10.1 are advised to apply patches or upgrade. Earlier versions (7.x and below) are unsupported and must be upgraded to ensure security.

References