2161 matches found
CVE-2023-45249
Remote command execution due to use of default passwords. The following products are affected: Acronis Cyber Infrastructure ACI before build 5.0.1-61, Acronis Cyber Infrastructure ACI before build 5.1.1-71, Acronis Cyber Infrastructure ACI before build 5.2.1-69, Acronis Cyber Infrastructure ACI...
CVE-2023-45249
Remote command execution due to use of default passwords. The following products are affected: Acronis Cyber Infrastructure ACI before build 5.0.1-61, Acronis Cyber Infrastructure ACI before build 5.1.1-71, Acronis Cyber Infrastructure ACI before build 5.2.1-69, Acronis Cyber Infrastructure ACI...
Acronis Cyber Infrastructure 安全漏洞
Acronis Cyber Infrastructure is a simple, efficient and secure solution for edge workloads from Acronis Switzerland. A security vulnerability exists in Acronis Cyber Infrastructure that stems from allowing the use of default passwords. An attacker exploiting the vulnerability could remotely execu...
VulnCheck KEV: CVE-2023-45249
Acronis Cyber Infrastructure ACI allows an unauthenticated user to execute commands remotely due to the use of default passwords...
PT-2024-5232 · Acronis · Acronis Cyber Infrastructure
Name of the Vulnerable Software and Affected Versions: Acronis Cyber Infrastructure ACI versions prior to 5.0.1-61 Acronis Cyber Infrastructure ACI versions prior to 5.1.1-71 Acronis Cyber Infrastructure ACI versions prior to 5.2.1-69 Acronis Cyber Infrastructure ACI versions prior to 5.3.1-53...
Acronis Cyber Infrastructure default password remote code execution
Acronis Cyber Infrastructure ACI is an IT infrastructure solution that provides storage, compute, and network resources. Businesses and Service Providers are using it for data storage, backup storage, creating and managing virtual machines and software-defined networks, running cloud-native...
Acronis: Potential XSS Vulnerability in Acronis Login Callback URL
The Acronis login callback URL was found to be vulnerable to cross-site scripting XSS attacks. The redirectUrl parameter in the URL was not properly sanitized, allowing an attacker to inject arbitrary JavaScript code. This could have been exploited to steal user session cookies...
CVE-2024-34013
Local privilege escalation due to OS command injection vulnerability. The following products are affected: Acronis True Image macOS before build 41396, Acronis True Image OEM macOS before build 42571...
CVE-2024-34013
CVE-2024-34013 affects Acronis True Image on macOS prior to build 41396. The issue is a local privilege escalation caused by an OS command injection vulnerability in the product, as reflected in multiple sources. The observed impact is elevation of privileges without user interaction. Remediation...
CVE-2024-34013
Local privilege escalation due to OS command injection vulnerability. The following products are affected: Acronis True Image macOS before build 41396, Acronis True Image OEM macOS before build 42571...
CVE-2024-34013
Local privilege escalation due to OS command injection vulnerability. The following products are affected: Acronis True Image macOS before build 41396, Acronis True Image OEM macOS before build 42571...
CVE-2022-45449
Sensitive information disclosure due to excessive privileges assigned to Acronis Agent. The following products are affected: Acronis Cyber Protect 15 Windows, Linux before build 30984...
CVE-2022-45449
Sensitive information disclosure due to excessive privileges assigned to Acronis Agent. The following products are affected: Acronis Cyber Protect 15 Windows, Linux before build 30984...
CVE-2022-45449
CVE-2022-45449 affects Acronis Cyber Protect 15 prior to build 30984. The root cause is excessive privileges granted to the Acronis Agent, enabling potential exposure of sensitive information. Impact: confidential data disclosure; remote attacker could access protected data if privileges are abus...
CVE-2022-45449
Sensitive information disclosure due to excessive privileges assigned to Acronis Agent. The following products are affected: Acronis Cyber Protect 15 Windows, Linux before build 30984...
CVE-2022-45449
Sensitive information disclosure due to excessive privileges assigned to Acronis Agent. The following products are affected: Acronis Cyber Protect 15 Windows, Linux before build 30984...
Security update of OpenSSH dependency
The Qualys Threat Research Unit has released a security advisory for a remote unauthenticated code execution vulnerability in OpenSSH's server versions earlier than 4.4p1 and versions from 8.5p1 up to, but not including, 9.8p1. The issue was assigned CVE-2024-6387. Acronis security team concluded...
CVE-2024-34012
Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis Cloud Manager Windows before build 6.2.24135.272...