Arcserve UDP <= 9.0.6034 - Authentication Bypass

Arcserve UDP through 9.0.6034 allows authentication bypass. The method getVersionInfo at WebServiceImpl/services/FlashServiceImpl leaks the AuthUUID token. This token can be used at /WebServiceImpl/services/VirtualStandbyServiceImpl to obtain a valid session. This session can be used to execute a...

Arcserve UDP Authentication Bypass (CVE-2023-26258)

Binary data arcserveudpcve-2023-26258.nbin...

CVE-2023-26258

Arcserve UDP