Acronis Agent Security Vulnerability

Acronis Agent is an agent software from Acronis Singapore. A security vulnerability exists in Acronis Agent that originates from a local elevation of privilege due to improper handling of soft links...

PT-2023-5790 · Acronis · Acronis Agent

Name of the Vulnerable Software and Affected Versions: Acronis Agent versions before build 29258 Description: The issue is related to sensitive information disclosure and manipulation due to missing authorization. This could allow an attacker to gain unauthorized access to protected information...

The vulnerability of backup and data recovery software on computers and servers with Acronis Agent and Acronis CyberProtect 15 software lies in the lack of protection for operational data, allowing attackers to access confidential information.

The vulnerability of backup and data recovery software on computers and servers with Acronis Agent and Acronis CyberProtect 15 data protection software lies in the lack of protection for operational data. Exploiting this vulnerability can allow unauthorized actors to gain access to confidential...

The vulnerability of backup and data recovery software on computers and servers with Acronis Agent lies in its authentication procedures’ flaws, which allow attackers to access confidential information.

The vulnerability of backup and data recovery software on computers and servers related to Acronis Agent lies in the flaws in the authentication process. Exploiting this vulnerability can allow attackers to access confidential information...

CVE-2023-4688

Sensitive information leak through log files. The following products are affected: Acronis Agent Linux, macOS, Windows before build 35433...

CVE-2023-4688

Sensitive information leak through log files. The following products are affected: Acronis Agent Linux, macOS, Windows before build 35433...

CVE-2023-41750

Sensitive information disclosure due to missing authorization. The following products are affected: Acronis Agent Linux, macOS, Windows before build 32047...

CVE-2023-41750

Sensitive information disclosure due to missing authorization. The following products are affected: Acronis Agent Linux, macOS, Windows before build 32047...

CVE-2023-41751

Sensitive information disclosure due to improper token expiration validation. The following products are affected: Acronis Agent Windows before build 32047...

CVE-2023-41751

Sensitive information disclosure due to improper token expiration validation. The following products are affected: Acronis Agent Windows before build 32047...

CVE-2023-41749

Sensitive information disclosure due to excessive collection of system information. The following products are affected: Acronis Agent Windows before build 32047, Acronis Cyber Protect 15 Windows before build 35979...

CVE-2023-41749

Sensitive information disclosure due to excessive collection of system information. The following products are affected: Acronis Agent Windows before build 32047, Acronis Cyber Protect 15 Windows before build 35979...

Information disclosure

Sensitive information disclosure due to improper token expiration validation. The following products are affected: Acronis Agent Windows before build 32047...

Information disclosure

Sensitive information leak through log files. The following products are affected: Acronis Agent Linux, macOS, Windows before build 35433...

Information disclosure

Sensitive information disclosure due to excessive collection of system information. The following products are affected: Acronis Agent Windows before build 32047, Acronis Cyber Protect 15 Windows before build 35979...

Information disclosure

Sensitive information disclosure due to missing authorization. The following products are affected: Acronis Agent Linux, macOS, Windows before build 32047...

CVE-2023-4688

The CVE-2023-4688 entry affects Acronis Agent on Linux, macOS, and Windows, with vulnerable prior to build 35433. Root cause cited across connected docs is insufficient protection of registration data, producing a sensitive information leak via log files. Impact is described as disclosure of logs...

CVE-2023-4688

Sensitive information leak through log files. The following products are affected: Acronis Agent Linux, macOS, Windows before build 35433...

CVE-2023-4688

Sensitive information leak through log files. The following products are affected: Acronis Agent Linux, macOS, Windows before build 35433...

CVE-2023-41751

Sensitive information disclosure due to improper token expiration validation. The following products are affected: Acronis Agent Windows before build 32047...