Acronis Agent Security Vulnerability

Acronis Agent is an agent software from Acronis Singapore. A security vulnerability exists in Acronis Agent that originates from a local elevation of privilege due to improper handling of soft links...

Acronis Agent Security Vulnerability

Acronis Agent is an agent software from Acronis Singapore. Acronis Agent suffers from a security vulnerability that stems from a lack of authorization leading to the disclosure and manipulation of sensitive information...

The vulnerability of backup and data recovery software on computers and servers with Acronis Agent lies in its authentication procedures’ flaws, which allow attackers to access confidential information.

The vulnerability of backup and data recovery software on computers and servers related to Acronis Agent lies in the flaws in the authentication process. Exploiting this vulnerability can allow attackers to access confidential information...

The vulnerability of backup and data recovery software on computers and servers with Acronis Agent and Acronis CyberProtect 15 software lies in the lack of protection for operational data, allowing attackers to access confidential information.

The vulnerability of backup and data recovery software on computers and servers with Acronis Agent and Acronis CyberProtect 15 data protection software lies in the lack of protection for operational data. Exploiting this vulnerability can allow unauthorized actors to gain access to confidential...

CVE-2023-4688

Sensitive information leak through log files. The following products are affected: Acronis Agent Linux, macOS, Windows before build 35433...

CVE-2023-4688

Sensitive information leak through log files. The following products are affected: Acronis Agent Linux, macOS, Windows before build 35433...

CVE-2023-41751

Sensitive information disclosure due to improper token expiration validation. The following products are affected: Acronis Agent Windows before build 32047...

CVE-2023-41749

Sensitive information disclosure due to excessive collection of system information. The following products are affected: Acronis Agent Windows before build 32047, Acronis Cyber Protect 15 Windows before build 35979...

CVE-2023-41751

Sensitive information disclosure due to improper token expiration validation. The following products are affected: Acronis Agent Windows before build 32047...

CVE-2023-41749

Sensitive information disclosure due to excessive collection of system information. The following products are affected: Acronis Agent Windows before build 32047, Acronis Cyber Protect 15 Windows before build 35979...

CVE-2023-41750

Sensitive information disclosure due to missing authorization. The following products are affected: Acronis Agent Linux, macOS, Windows before build 32047...

CVE-2023-41750

Sensitive information disclosure due to missing authorization. The following products are affected: Acronis Agent Linux, macOS, Windows before build 32047...

Information disclosure

Sensitive information leak through log files. The following products are affected: Acronis Agent Linux, macOS, Windows before build 35433...

Information disclosure

Sensitive information disclosure due to improper token expiration validation. The following products are affected: Acronis Agent Windows before build 32047...

Information disclosure

Sensitive information disclosure due to excessive collection of system information. The following products are affected: Acronis Agent Windows before build 32047, Acronis Cyber Protect 15 Windows before build 35979...

Information disclosure

Sensitive information disclosure due to missing authorization. The following products are affected: Acronis Agent Linux, macOS, Windows before build 32047...

CVE-2023-4688

Sensitive information leak through log files. The following products are affected: Acronis Agent Linux, macOS, Windows before build 35433...

CVE-2023-4688

Sensitive information leak through log files. The following products are affected: Acronis Agent Linux, macOS, Windows before build 35433...

CVE-2023-4688

The CVE-2023-4688 entry affects Acronis Agent on Linux, macOS, and Windows, with vulnerable prior to build 35433. Root cause cited across connected docs is insufficient protection of registration data, producing a sensitive information leak via log files. Impact is described as disclosure of logs...

CVE-2023-41751

CVE-2023-41751 affects Acronis Agent (Windows) before build 32047. The root cause is improper token expiration validation, enabling potential disclosure of sensitive information (confidentiality impact: HIGH). The vulnerability is local in nature (attack vector: LOCAL) with low privileges require...