Lucene search
AcronisCVE-2022-30995HistoryMay 03, 2023 - 11:15 a.m.
CVE-2022-30995
2023-05-0311:15:11
CWE-287
Acronis
web.nvd.nist.gov
16
cve-2022-30995
sensitive information disclosure
improper authentication
acronis cyber protect 15
acronis cyber backup 12.5
nvd
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
AI Score
7.2
Confidence
High
EPSS
0.001
Percentile
43.0%
Sensitive information disclosure due to improper authentication. The following products are affected: Acronis Cyber Protect 15 (Windows, Linux) before build 29486, Acronis Cyber Backup 12.5 (Windows, Linux) before build 16545.
Affected configurations
Node
acroniscyber_backupMatch12.5-
ORacroniscyber_backupMatch12.510130
ORacroniscyber_backupMatch12.510330
ORacroniscyber_backupMatch12.511010
ORacroniscyber_backupMatch12.513160
ORacroniscyber_backupMatch12.513400
ORacroniscyber_backupMatch12.514280
ORacroniscyber_backupMatch12.514330
ORacroniscyber_backupMatch12.516180
ORacroniscyber_backupMatch12.516318
ORacroniscyber_backupMatch12.516327
ORacroniscyber_backupMatch12.57641
ORacroniscyber_backupMatch12.57970
ORacroniscyber_backupMatch12.58850
ORacroniscyber_backupMatch12.59010
ORacroniscyber_protectMatch15-
ORacroniscyber_protectMatch15update1
ORacroniscyber_protectMatch15update2
ORacroniscyber_protectMatch15update3
linuxlinux_kernelMatch-
ORmicrosoftwindowsMatch-
| Vendor | Product | Version | CPE |
|---|---|---|---|
| acronis | cyber_backup | 12.5 | cpe:2.3:a:acronis:cyber_backup:12.5:-:*:*:*:*:*:* |
| acronis | cyber_backup | 12.5 | cpe:2.3:a:acronis:cyber_backup:12.5:10130:*:*:*:*:*:* |
| acronis | cyber_backup | 12.5 | cpe:2.3:a:acronis:cyber_backup:12.5:10330:*:*:*:*:*:* |
| acronis | cyber_backup | 12.5 | cpe:2.3:a:acronis:cyber_backup:12.5:11010:*:*:*:*:*:* |
| acronis | cyber_backup | 12.5 | cpe:2.3:a:acronis:cyber_backup:12.5:13160:*:*:*:*:*:* |
| acronis | cyber_backup | 12.5 | cpe:2.3:a:acronis:cyber_backup:12.5:13400:*:*:*:*:*:* |
| acronis | cyber_backup | 12.5 | cpe:2.3:a:acronis:cyber_backup:12.5:14280:*:*:*:*:*:* |
| acronis | cyber_backup | 12.5 | cpe:2.3:a:acronis:cyber_backup:12.5:14330:*:*:*:*:*:* |
| acronis | cyber_backup | 12.5 | cpe:2.3:a:acronis:cyber_backup:12.5:16180:*:*:*:*:*:* |
| acronis | cyber_backup | 12.5 | cpe:2.3:a:acronis:cyber_backup:12.5:16318:*:*:*:*:*:* |
CNA Affected
[
{
"vendor": "Acronis",
"product": "Acronis Cyber Protect 15",
"platforms": [
"Windows",
"Linux"
],
"versions": [
{
"version": "unspecified",
"status": "affected",
"lessThan": "29486",
"versionType": "semver"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "Acronis",
"product": "Acronis Cyber Backup 12.5",
"platforms": [
"Windows",
"Linux"
],
"versions": [
{
"version": "unspecified",
"status": "affected",
"lessThan": "16545",
"versionType": "semver"
}
],
"defaultStatus": "unaffected"
}
]Related
cvelist
cvelist
CVE-2022-30995
2023-05-03 10:50:45
prion
prion
Authentication flaw
2023-05-03 11:15:00
nvd
nvd
CVE-2022-30995
2023-05-03 11:15:11
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
AI Score
7.2
Confidence
High
EPSS
0.001
Percentile
43.0%
Related for CVE-2022-30995