{"cve":"CVE-2023-26258","epss":{"score":0.39773},"mitre":{"cpes":[],"created":"2023-07-03T00:00:00+00:00","description":"Arcserve UDP through 9.0.6034 allows authentication bypass. The method getVersionInfo at WebServiceImpl/services/FlashServiceImpl leaks the AuthUUID token. This token can be used at /WebServiceImpl/services/VirtualStandbyServiceImpl to obtain a valid session. This session can be used to execute any task as administrator.","metrics":{"cvssV2_0":{},"cvssV3_0":{},"cvssV3_1":{},"cvssV4_0":{}},"mitre_repo_path":"cves/2023/26xxx/CVE-2023-26258.json","references":["https://support.arcserve.com/s/article/KB000015720?language=en_US","https://www.arcserve.com/products/arcserve-udp","https://www.mdsec.co.uk/2023/06/cve-2023-26258-remote-code-execution-in-arcserve-udp-backup/"],"title":null,"updated":"2024-11-25T18:13:36.921000+00:00","vendors":[],"weaknesses":[]},"nvd":{"cpes":["cpe:2.3:a:arcserve:udp:*:*:*:*:*:*:*:*"],"created":"2023-07-03T15:15:10.377000+00:00","description":"Arcserve UDP through 9.0.6034 allows authentication bypass. The method getVersionInfo at WebServiceImpl/services/FlashServiceImpl leaks the AuthUUID token. This token can be used at /WebServiceImpl/services/VirtualStandbyServiceImpl to obtain a valid session. This session can be used to execute any task as administrator.","metrics":{"cvssV2_0":{},"cvssV3_0":{},"cvssV3_1":{"score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},"cvssV4_0":{}},"nvd_repo_path":"2023/CVE-2023-26258.json","references":["https://support.arcserve.com/s/article/KB000015720?language=en_US","https://www.arcserve.com/products/arcserve-udp","https://www.mdsec.co.uk/2023/06/cve-2023-26258-remote-code-execution-in-arcserve-udp-backup/"],"title":null,"updated":"2026-06-17T05:42:55.113000+00:00","vendors":["arcserve","arcserve$PRODUCT$udp"],"weaknesses":["CWE-863"]},"opencve":{"changes":[{"created":"2024-11-25T19:15:00+00:00","data":[{"details":{"added":{"ssvc":{"options":{"Automatable":"yes","Exploitation":"poc","Technical Impact":"total"},"version":"2.0.3"}},"removed":{},"updated":{}},"type":"metrics"}],"id":"646723f6-8588-47b9-a6df-c3043ef6085e"}],"cpes":{"data":["cpe:2.3:a:arcserve:udp:*:*:*:*:*:*:*:*"],"providers":["nvd"]},"created":{"data":"2023-07-03T00:00:00+00:00","provider":"mitre"},"description":{"data":"Arcserve UDP through 9.0.6034 allows authentication bypass. The method getVersionInfo at WebServiceImpl/services/FlashServiceImpl leaks the AuthUUID token. This token can be used at /WebServiceImpl/services/VirtualStandbyServiceImpl to obtain a valid session. This session can be used to execute any task as administrator.","provider":"mitre"},"metrics":{"cvssV2_0":{"data":{},"provider":null},"cvssV3_0":{"data":{},"provider":null},"cvssV3_1":{"data":{"score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},"provider":"nvd"},"cvssV4_0":{"data":{},"provider":null},"epss":{"data":{"score":0.39773},"provider":"first"},"kev":{"data":{},"provider":null},"ssvc":{"data":{"options":{"Automatable":"yes","Exploitation":"poc","Technical Impact":"total"},"version":"2.0.3"},"provider":"vulnrichment"},"threat_severity":{"data":null,"provider":null}},"references":{"data":["https://support.arcserve.com/s/article/KB000015720?language=en_US","https://www.arcserve.com/products/arcserve-udp","https://www.mdsec.co.uk/2023/06/cve-2023-26258-remote-code-execution-in-arcserve-udp-backup/"],"providers":["mitre","nvd"]},"title":{"data":null,"provider":null},"updated":{"data":"2024-11-25T18:13:36.921000+00:00","provider":"mitre"},"vendors":{"data":["arcserve","arcserve$PRODUCT$udp"],"providers":["nvd"]},"weaknesses":{"data":["CWE-863"],"providers":["nvd"]}},"vulnrichment":{"cpes":[],"created":"2023-07-03T00:00:00+00:00","description":"Arcserve UDP through 9.0.6034 allows authentication bypass. The method getVersionInfo at WebServiceImpl/services/FlashServiceImpl leaks the AuthUUID token. This token can be used at /WebServiceImpl/services/VirtualStandbyServiceImpl to obtain a valid session. This session can be used to execute any task as administrator.","metrics":{"cvssV2_0":{},"cvssV3_0":{},"cvssV3_1":{},"cvssV4_0":{},"kev":{},"ssvc":{"options":{"Automatable":"yes","Exploitation":"poc","Technical Impact":"total"},"version":"2.0.3"}},"references":[],"title":null,"updated":"2024-11-25T18:13:32.247000+00:00","vendors":[],"vulnrichment_repo_path":"2023/26xxx/CVE-2023-26258.json","weaknesses":[]}}