Lucene search

K
hackeroneAapoH1:1070533
HistoryJan 03, 2021 - 11:21 a.m.

Acronis: Acronis True Image 2021 (windows) does not validate server hostname on a login TLS connection

2021-01-0311:21:27
aapo
hackerone.com
$250
19
acronis
true image
windows
ssl certificate
cve-2021-32581
bug bounty

EPSS

0.001

Percentile

49.7%

Acronis True Image prior to 2021 Update 4 for Windows, Acronis True Image prior to 2021 Update 5 for Mac did not properly validate SSL certificate. The issue was assigned CVE-2021-32581. We have seen no signs of the exploitation of this vulnerability.

EPSS

0.001

Percentile

49.7%

Related for H1:1070533