[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fSUV53n1brjWCNj2Mzj8GVsaXSz-Kzv4zllU7HrA1np4":3,"g5a-risk:CVE-2023-52948":101},{"success":4,"data":5,"meta":98},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":35,"epssPercentile":28,"epssTimeSeries":36,"severity":37,"affectedProducts":38,"affectedProductsCount":44,"references":45,"referencesCount":44,"weaknesses":51,"weaknessesCount":44,"isActivelyExploited":60,"cisaInfo":28,"otxData":28,"relatedBlogPosts":61,"seoMetadata":62,"configurations":87,"relatedVendorCves":96,"notableEvents":97},"CVE-2023-52948","What is CVE-2023-52948?","Missing encryption of sensitive data vulnerability in settings functionality in Synology Active Backup for Business Agent before 2.7.0-3221 allows local users to obtain user credential via unspecified vectors.","Missing encryption of sensitive data vulnerability in settings functionality in Synology Active Backup for Business Agent before 2.7.0-3221 allows local user...","2024-09-26T04:15:06.327","2024-10-02T15:26:30.16",5,"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:U\u002FC:H\u002FI:N\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":28,"CVSSMetricV2":28,"CVSSMetricV40":28},[16,31],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":29,"ImpactScore":30},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":22,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":26,"AvailabilityImpact":26,"BaseScore":12,"BaseSeverity":27,"ExploitCodeMaturity":28,"RemediationLevel":28,"ReportConfidence":28,"TemporalScore":28,"TemporalSeverity":28,"ConfidentialityRequirement":28,"IntegrityRequirement":28,"AvailabilityRequirement":26,"ModifiedAttackVector":28,"ModifiedAttackComplexity":28,"ModifiedPrivilegesRequired":28,"ModifiedUserInteraction":28,"ModifiedScope":28,"ModifiedConfidentialityImpact":28,"ModifiedIntegrityImpact":28,"ModifiedAvailabilityImpact":28,"EnvironmentalScore":28,"EnvironmentalSeverity":28},"3.1","LOCAL","LOW","REQUIRED","UNCHANGED","HIGH","NONE","MEDIUM",null,1.3,3.6,{"Source":32,"Type":33,"CVSSData":34,"ExploitabilityScore":29,"ImpactScore":30},"security@synology.com","Secondary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":22,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":26,"AvailabilityImpact":26,"BaseScore":12,"BaseSeverity":27,"ExploitCodeMaturity":28,"RemediationLevel":28,"ReportConfidence":28,"TemporalScore":28,"TemporalSeverity":28,"ConfidentialityRequirement":28,"IntegrityRequirement":28,"AvailabilityRequirement":26,"ModifiedAttackVector":28,"ModifiedAttackComplexity":28,"ModifiedPrivilegesRequired":28,"ModifiedUserInteraction":28,"ModifiedScope":28,"ModifiedConfidentialityImpact":28,"ModifiedIntegrityImpact":28,"ModifiedAvailabilityImpact":28,"EnvironmentalScore":28,"EnvironmentalSeverity":28},0.00085,[35,35,35,35,35,35,35],"Medium",[39],{"vendor":40,"product":41,"version":42,"criteria":43,"vulnerable":4},"synology","active_backup_for_business_agent","*","cpe:2.3:a:synology:active_backup_for_business_agent:*:*:*:*:*:*:*:*",1,[46],{"url":47,"source":48,"tags":49},"https:\u002F\u002Fwww.synology.com\u002Fen-global\u002Fsecurity\u002Fadvisory\u002FSynology_SA_24_11","Synology",[50],"Vendor Advisory",[52],{"id":53,"name":54,"description":55,"extendedDescription":56,"status":57,"abstraction":58,"structure":59},"CWE-311","Missing Encryption of Sensitive Data","The product does not encrypt sensitive or critical information before storage or transmission.","The lack of proper data encryption passes up the guarantees of confidentiality, integrity, and accountability that properly implemented encryption conveys.","Draft","Class","Simple",false,[],{"title":63,"metaDescription":64,"keywords":65,"canonicalUrl":66,"structuredData":67},"What is CVE-2023-52948? Vulnerability Analysis | Security Advisory | EdgeProtect","Comprehensive analysis of CVE-2023-52948, a medium severity cyber security vulnerability from 2024. Missing encryption of sensitive data vulnerability in set...","CVE-2023-52948, CVE-2023-52948 vulnerability, CVE-2023-52948 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2024, CVSS score, exploit, patch, remediation, synology security, active_backup_for_business_agent vulnerability","\u002Fwhat-is\u002Fcve-2023-52948",{"@context":68,"@type":69,"headline":63,"description":64,"datePublished":10,"dateModified":11,"author":70,"publisher":74,"about":78,"mainEntityOfPage":82,"articleSection":85,"keywords":86},"https:\u002F\u002Fschema.org","TechArticle",{"@type":71,"name":72,"url":73},"Organization","EdgeProtect","https:\u002F\u002Fedgeprotect.io",{"@type":71,"name":72,"url":73,"logo":75},{"@type":76,"url":77},"ImageObject","https:\u002F\u002Fedgeprotect.io\u002Fimg\u002Flogos\u002Fedgeprotect-logo-512.png",{"@type":79,"name":6,"description":80,"additionalType":81},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":83,"@id":84},"WebPage","https:\u002F\u002Fedgeprotect.io\u002Fwhat-is\u002Fcve-2023-52948","Cybersecurity","CVE-2023-52948, CVE-2023-52948 vulnerability, CVE-2023-52948 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[88],{"Operator":28,"Negate":28,"Nodes":89},[90],{"Operator":91,"Negate":28,"CPEMatch":92},"OR",[93],{"Vulnerable":4,"Criteria":43,"MatchCriteriaID":94,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":95,"VersionEndIncluding":28},"8E3B60AF-9152-4FDC-B2C0-2388A3B019CE","2.7.0-3221",[],[],{"lastModified":11,"cacheTime":99,"version":100},1793201806602,"2.0",{"score":102,"band":103,"action":104,"scoredAt":105},16,"Info","Track","2026-07-01T10:34:05.741798+00:00"]