CVE-2023-45247

🗓️ 09 Oct 2023 11:09:00Reported by AcronisType

Sensitive information disclosure and manipulation due to missing authorization in Acronis Agen

Reporter	Title	Published	Views	Family All 12
BDU FSTEC	The vulnerability of backup and data recovery software on computers and servers with Acronis Agent, related to authentication errors, allows attackers to escalate their privileges.	10 Oct 202300:00	–	bdu_fstec
Circl	CVE-2023-45247	9 Oct 202316:16	–	circl
CNNVD	Acronis Cyber Protect and Acronis Cyber Protect Cloud Agent Security Vulnerabilities	9 Oct 202300:00	–	cnnvd
CVE	CVE-2023-45247	9 Oct 202311:09	–	cve
EUVD	EUVD-2023-49553	3 Oct 202520:07	–	euvd
Hive Pro Threat Advisories	Russian SVR Exploits Critical TeamCity Vulnerability Globally	15 Dec 202313:07	–	hivepro
Kitploit	Cve-Collector - Simple Latest CVE Collector	1 Nov 202311:30	–	kitploit
NVD	CVE-2023-45247	9 Oct 202312:15	–	nvd
Prion	Authorization	9 Oct 202312:15	–	prion
Positive Technologies	PT-2023-5801 · Acronis · Acronis Cyber Protect 16 +2	9 Oct 202300:00	–	ptsecurity

[
  {
    "vendor": "Acronis",
    "product": "Acronis Cyber Protect Cloud Agent",
    "platforms": [
      "Linux",
      "macOS",
      "Windows"
    ],
    "versions": [
      {
        "version": "unspecified",
        "status": "affected",
        "lessThan": "36497",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "Acronis",
    "product": "Acronis Cyber Protect 16",
    "platforms": [
      "Linux",
      "macOS",
      "Windows"
    ],
    "versions": [
      {
        "version": "unspecified",
        "status": "affected",
        "lessThan": "39169",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Source	Link
security-advisory	www.security-advisory.acronis.com/advisories/SEC-6600

02 Jan 2025 15:25Current

7.5High risk

Vulners AI Score7.5

CVSS 37.1

EPSS0.00077

CWE-862