PT-2021-11174 · Acronis · Acronis True Image

Name of the Vulnerable Software and Affected Versions: Acronis True Image versions 2019 update 1 through 2021 update 1 Description: The issue allows local privilege escalation due to an insecure XPC service configuration. Recommendations: For Acronis True Image versions 2019 update 1 through 2021...

CVE-2020-25736

Acronis True Image 2019 update 1 through 2021 update 1 on macOS allows local privilege escalation due to an insecure XPC service configuration...

CVE-2020-25593: Incorrect Default Permissions

Acronis True Image through 2021 on macOS allows local privilege escalation from admin to root due to insecure folder permissions...

CVE-2020-15495: Undefined Security Weakness

Acronis True Image 2019 update 1 through 2020 on macOS allows local privilege escalation due to an insecure XPC service configuration...

Acronis True Image 安全漏洞

Acronis True Image is a well-known data backup and restore software from Singapore-based Acronis. The software can be used to create drive and disk images and can restore images when a clean system is needed.Acronis True Image has a security vulnerability that can be exploited by attackers for...

CVE-2020-25736: Undefined Security Weakness

Acronis True Image 2019 update 1 through 2021 update 1 on macOS allows local privilege escalation due to an insecure XPC service configuration...

CVE-2020-25736

CVE-2020-25736 affects Acronis True Image on macOS (2019 update 1 through 2021 update 1). The root cause is an insecure XPC service configuration that enables local privilege escalation via a vulnerable helper executable (com.acronis.trueimagehelper). Public references note a local exploit path a...

PT-2021-9797

Name of the Vulnerable Software and Affected Versions Acronis True Image versions 2019 update 1 through 2020 Description The issue allows local privilege escalation due to an insecure XPC service configuration. Recommendations For Acronis True Image versions 2019 update 1 through 2020, update to ...

Acronis True Image 安全漏洞

Acronis True Image is a famous data backup and restore software from Acronis Singapore. The software can be used to create drive and disk images and can restore the image when a clean system is needed. Acronis True Image suffers from a security vulnerability that stems from an insecure XPC servic...

Acronis True Image 安全漏洞

Acronis True Image is a famous data backup and restore software from Acronis Singapore. The software can be used to create drive and disk images and can restore the image when a clean system is needed. Acronis True Image suffers from a security vulnerability that stems from an insecure XPC servic...

PT-2021-9798

Name of the Vulnerable Software and Affected Versions Acronis True Image for Mac versions prior to 2021 Update 4 Description The issue allows local privilege escalation due to insecure folder permissions. Recommendations For versions prior to 2021 Update 4, update to 2021 Update 4 or later to...

CVE-2020-15496: Improper Preservation of Permissions

Acronis True Image for Mac before 2021 Update 4 allowed local privilege escalation due to insecure folder permissions...

PT-2021-11162

Name of the Vulnerable Software and Affected Versions: Acronis True Image through 2021 on macOS Description: The issue allows local privilege escalation from admin to root due to insecure folder permissions. Recommendations: For Acronis True Image through 2021 on macOS, update to a version later...

Acronis True Image 安全漏洞

Acronis True Image is a famous data backup and restore software from Acronis Singapore. The software can be used to create drive and disk images and can restore the image when a clean system is needed. Acronis True Image suffers from a security vulnerability that stems from insecure folder...

Acronis: Subdomain takeover of main domain of https://www.cyberlynx.lu/

Summary Hi Acronis Security Team , Hope you well. I found one of your subdomains which is www.cyberlynx.lu One of your Acquisition is pointing towards www.cyberlynx.lu canonical name = www118.wixdns.net. www118.wixdns.net canonical name = balancer.wixdns.net. balancer.wixdns.net canonical name =...

Acronis: Acronis True Image Local Privilege Escalation Due To Race Condition In Application Verification

Summary The Acronis True Image application has a SUID binary "Acronis True Image" that starts another binary "console" in the same directory. The SUID binary does some checks on "console" before it is run to make sure the correct binary is being run. By using a hardlink to the SUID binary we can...

Acronis: CSS Injection via Client Side Path Traversal + Open Redirect leads to personal data exfiltration on Acronis Cloud

Summary Hi team, I hope everything goes well. I have found a CSS Injection in Acronis Cloud Management Consolehttps://mc-beta-cloud.acronis.com/mc via the colorscheme GET parameter. Description: The flow work as I will comment below. If we go to the URL...

Acronis: FULL SSRF

hello dear support i have found full ssrf on https://summit.acronis.events step go to here https://summit.acronis.events 2 login into website 3 open this link...

Acronis True Image Arbitrary File Overwrite Vulnerability

Acronis True Image is a well-known data backup and restore software from Singapore-based Acronis. The software can be used to create drive and disk images and can restore images when a clean system is needed.Acronis True Image 2020 version 24.5.22510 contains an arbitrary file overwrite...

Acronis True Image Denial of Service Vulnerability

Acronis True Image is a well-known data backup and restore software from Singapore-based Acronis. Acronis True Image 2020 version 24.5.22510 contains a denial of service vulnerability that stems from the program's logs being generated in a predictable pattern, allowing a non-privileged user to...