Lucene search

K
nvd[email protected]NVD:CVE-2024-34018
HistoryAug 29, 2024 - 8:15 p.m.

CVE-2024-34018

2024-08-2920:15:07
CWE-276
web.nvd.nist.gov
information disclosure
insecure folder permissions
acronis snap deploy

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS

0

Percentile

9.6%

Sensitive information disclosure due to insecure folder permissions. The following products are affected: Acronis Snap Deploy (Windows) before build 4569.

Affected configurations

Nvd
Node
acronissnap_deployRange<6windows
OR
acronissnap_deployMatch6-windows
OR
acronissnap_deployMatch6update1windows
OR
acronissnap_deployMatch6update1.1windows
OR
acronissnap_deployMatch6update1.2windows
VendorProductVersionCPE
acronissnap_deploy*cpe:2.3:a:acronis:snap_deploy:*:*:*:*:*:windows:*:*
acronissnap_deploy6cpe:2.3:a:acronis:snap_deploy:6:-:*:*:*:windows:*:*
acronissnap_deploy6cpe:2.3:a:acronis:snap_deploy:6:update1:*:*:*:windows:*:*
acronissnap_deploy6cpe:2.3:a:acronis:snap_deploy:6:update1.1:*:*:*:windows:*:*
acronissnap_deploy6cpe:2.3:a:acronis:snap_deploy:6:update1.2:*:*:*:windows:*:*

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS

0

Percentile

9.6%

Related for NVD:CVE-2024-34018