Lucene search

[email protected]CVE-2023-44210

HistoryOct 04, 2023 - 8:15 p.m.

CVE-2023-44210

2023-10-0420:15:10

CWE-862

[email protected]

web.nvd.nist.gov

cve-2023-44210

information security

authorization

sensitive information

disclosure

manipulation

acronis agent

nvd

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

6.9 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

JSON

Sensitive information disclosure and manipulation due to missing authorization. The following products are affected: Acronis Agent (Linux, macOS, Windows) before build 29258.

Affected configurations

NVD

Node

acronisagentMatchc22.03

AND

applemacosMatch-

linuxlinux_kernelMatch-

microsoftwindowsMatch-

CPENameOperatorVersion
acronis:agentacronis agenteqc22.03

CPE	Name	Operator	Version
acronis:agent	acronis agent	eq	c22.03

CNA Affected

[
  {
    "vendor": "Acronis",
    "product": "Acronis Agent",
    "platforms": [
      "Linux",
      "macOS",
      "Windows"
    ],
    "versions": [
      {
        "version": "unspecified",
        "status": "affected",
        "lessThan": "29258",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

References

security-advisory.acronis.com/advisories/SEC-2159

security-advisory.acronis.com/SEC-5528

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

6.9 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

JSON

Related for CVE-2023-44210

cvelist1 prion1 nvd1