7 matches found
PT-2021-12852
Name of the Vulnerable Software and Affected Versions: Acronis True Image 2020 version 24.5.22510 Description: An issue was discovered where the anti ransomware service.exe keeps a log in a folder with write permissions for unprivileged users. The logs follow a predictable pattern, allowing an...
PT-2021-12853
Name of the Vulnerable Software and Affected Versions: Acronis True Image 2020 version 24.5.22510 Description: An issue was discovered in the anti ransomware service.exe component, which includes functionality to quarantine files by copying a suspected ransomware file from one directory to anothe...
PT-2021-12851
Name of the Vulnerable Software and Affected Versions: Acronis True Image 2020 version 24.5.22510 Description: An issue was discovered in the anti ransomware service.exe component, which exposes a REST API that can be accessed by all users, including unprivileged ones. This API is used for...
CVE-2020-9450: Incorrect Default Permissions
An issue was discovered in Acronis True Image 2020 24.5.22510. antiransomwareservice.exe exposes a REST API that can be used by everyone, even unprivileged users. This API is used to communicate from the GUI to antiransomwareservice.exe. This can be exploited to add an arbitrary malicious...
CVE-2020-9451: Incorrect Default Permissions
An issue was discovered in Acronis True Image 2020 24.5.22510. antiransomwareservice.exe keeps a log in a folder where unprivileged users have write permissions. The logs are generated in a predictable pattern, allowing an unprivileged user to create a hardlink from a not yet created log file to...
CVE-2020-9452: Improper Link Resolution Before File Access
An issue was discovered in Acronis True Image 2020 24.5.22510. antiransomwareservice.exe includes functionality to quarantine files by copying a suspected ransomware file from one directory to another using SYSTEM privileges. Because unprivileged users have write permissions in the quarantine...
