Design/Logic Flaw

Local privilege escalation due to incomplete uninstallation cleanup. The following products are affected: Acronis Cyber Protect Home Office Windows before build 40107, Acronis Agent Windows before build 30025, Acronis Cyber Protect 15 Windows before build 30984...

Information disclosure

Sensitive information disclosure due to insecure folder permissions. The following products are affected: Acronis Agent Windows before build 30161, Acronis Cyber Protect 15 Windows before build 30984...

CVE-2022-45455

Local privilege escalation due to incomplete uninstallation cleanup. The following products are affected: Acronis Cyber Protect Home Office Windows before build 40107, Acronis Agent Windows before build 30025, Acronis Cyber Protect 15 Windows before build 30984...

CVE-2022-45455

Local privilege escalation due to incomplete uninstallation cleanup. The following products are affected: Acronis Cyber Protect Home Office Windows before build 40107, Acronis Agent Windows before build 30025, Acronis Cyber Protect 15 Windows before build 30984...

CVE-2022-45455

CVE-2022-45455 affects Acronis Cyber Protect Home Office (Windows) before build 40107, Acronis Agent (Windows) before build 30025, and Acronis Cyber Protect 15 (Windows) before build 30984. The issue is a local privilege escalation caused by incomplete uninstall cleanup, allowing an attacker to e...

CVE-2022-45454

Sensitive information disclosure due to insecure folder permissions. The following products are affected: Acronis Agent Windows before build 30161, Acronis Cyber Protect 15 Windows before build 30984...

CVE-2022-45454

CVE-2022-45454 affects Acronis Agent (Windows) before build 30161 and Acronis Cyber Protect 15 (Windows) before build 30984. Root cause is insecure folder permissions, causing potential disclosure of sensitive information. Affected products: Acronis Agent (Windows) prior to 30161; Acronis Cyber P...

CVE-2022-45454

Sensitive information disclosure due to insecure folder permissions. The following products are affected: Acronis Agent Windows before build 30161, Acronis Cyber Protect 15 Windows before build 30984...

Acronis Agent 安全漏洞

Acronis Agent is an agent software from Acronis Singapore. A security vulnerability exists in Acronis Cyber Protect Home Office Windows versions prior to 40107, Acronis Agent Windows versions prior to 30025, and Acronis Cyber Protect 15 Windows versions prior to 30984, which originates from The...

Acronis Agent 安全漏洞

Acronis Agent is an agent software from Acronis Singapore. A security vulnerability exists in Acronis Agent Windows versions prior to 30161, Acronis Cyber Protect 15 Windows versions prior to 30984, which originates from improperly set folder permissions. An attacker could exploit the vulnerabili...

Metasploit Weekly Wrap-Up

A sack full of cheer from the Hacking Elves of Metasploit It is clear that the Metasploit elves have been busy this season: Five new modules, six new enhancements, nine new bug fixes, and a partridge in a pear tree are headed out this week! Partridge nor pear tree included. In this sack of goodie...

Acronis TrueImage XPC Privilege Escalation Exploit

Acronis TrueImage versions 2019 update 1 through 2021 update 1 are vulnerable to privilege escalation. The com.acronis.trueimagehelper helper tool does not perform any validation on connecting clients, which gives arbitrary clients the ability to execute functions provided by the helper tool with...

Acronis TrueImage XPC Privilege Escalation

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Acronis TrueImage XPC Privilege Escalation', 'Description' = %q Acronis TrueImage versions 2019 update 1 through 2021 update 1 are vulnerable to...

PT-2022-27522 · Acronis · Acronis Agent +2

Name of the Vulnerable Software and Affected Versions: Acronis Agent Windows versions before build 29633 Acronis Cyber Protect 15 Windows versions before build 30984 Description: The issue is related to sensitive information disclosure and manipulation due to improper certification validation...

PT-2022-27521 · Acronis · Acronis Cyber Protect Home Office +3

Name of the Vulnerable Software and Affected Versions: Acronis Cyber Protect Home Office versions prior to build 40107 Acronis Agent versions prior to build 30025 Acronis Cyber Protect 15 versions prior to build 30984 Description: The issue is related to local privilege escalation due to incomple...

PT-2022-27517 · Acronis · Acronis Agent +2

Name of the Vulnerable Software and Affected Versions: Acronis Agent versions before build 28610 Acronis Cyber Protect 15 versions before build 30984 Description: The issue is related to sensitive information disclosure and manipulation due to improper authorization. Recommendations: For Acronis...

PT-2022-21987

Name of the Vulnerable Software and Affected Versions Acronis Cyber Protect 15 versions prior to build 29486 Acronis Cyber Backup 12.5 versions prior to build 16545 Description The issue is related to excessive privileges assigned to Acronis Agent, leading to code execution and sensitive...

PT-2022-27519 · Acronis · Acronis Cyber Protect 15 +1

Name of the Vulnerable Software and Affected Versions: Acronis Cyber Protect 15 versions prior to build 30984 Description: The issue concerns TLS/SSL weak cipher suites being enabled. This affects Acronis Cyber Protect 15 on both Windows and Linux platforms. Recommendations: For Acronis Cyber...

PT-2022-20443 · Acronis · Acronis Cyber Backup 12.5 +2

Name of the Vulnerable Software and Affected Versions: Acronis Cyber Protect 15 versions before build 29486 Acronis Cyber Backup 12.5 versions before build 16545 Description: The issue is related to sensitive information disclosure due to improper authentication. Recommendations: For Acronis Cybe...

PT-2022-27523 · Acronis +2 · Acronis Agent +4

Name of the Vulnerable Software and Affected Versions: Acronis Agent versions before build 29633 Acronis Cyber Protect 15 versions before build 30984 Description: The issue is related to sensitive information disclosure and manipulation due to improper certification validation. This affects Acron...