CVE-2024-49386: Exposure of Private Personal Information to an Unauthorized Actor

Sensitive information disclosure due to spell-jacking. The following products are affected: Acronis Cyber Files Windows before build 9.0.0x24...

Acronis Cyber Files 代码问题漏洞

Acronis Cyber Files is a secure file synchronization and sharing solution from Acronis Switzerland. A code issue vulnerability exists in Acronis Cyber Files versions prior to 9.0.0x24 that stems from DLL hijacking leading to local elevation of privilege...

CVE-2024-49391: Uncontrolled Search Path Element

Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Files Windows before build 9.0.0x24...

CVE-2024-49389: Incorrect Default Permissions

Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis Cyber Files Windows before build 9.0.0x24...

CVE-2024-49392: Improper Neutralization of Input During Web Page Generation

Stored cross-site scripting XSS vulnerability on enrollment invitation page. The following products are affected: Acronis Cyber Files Windows before build 9.0.0x24...

PT-2024-33500 · Acronis · Acronis Cyber Files

Name of the Vulnerable Software and Affected Versions: Acronis Cyber Files Windows versions before 9.0.0x24 Description: The issue is related to local privilege escalation due to insecure folder permissions. Recommendations: For Acronis Cyber Files Windows versions before 9.0.0x24, update to a...

CVE-2024-49390: Uncontrolled Search Path Element

Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Files Windows before build 9.0.0x24...