Lucene search

K
hackeroneAapoH1:1056144
HistoryDec 10, 2020 - 7:45 p.m.

Acronis: Acronis True Image (Windows) does not validate server certificate on a TLS connection

2020-12-1019:45:10
aapo
hackerone.com
$500
9
acronis
true image
windows
ssl certificate validation
cve-2021-32581
bug bounty
exploitation

EPSS

0.001

Percentile

49.7%

Acronis True Image prior to 2021 Update 4 for Windows, Acronis True Image prior to 2021 Update 5 for Mac did not implement SSL certificate validation. The issue was assigned CVE-2021-32581. We have seen no signs of the exploitation of this vulnerability.

EPSS

0.001

Percentile

49.7%

Related for H1:1056144