PT-2021-12853

Name of the Vulnerable Software and Affected Versions: Acronis True Image 2020 version 24.5.22510 Description: An issue was discovered in the anti ransomware service.exe component, which includes functionality to quarantine files by copying a suspected ransomware file from one directory to anothe...

PT-2021-12852

Name of the Vulnerable Software and Affected Versions: Acronis True Image 2020 version 24.5.22510 Description: An issue was discovered where the anti ransomware service.exe keeps a log in a folder with write permissions for unprivileged users. The logs follow a predictable pattern, allowing an...

Acronis True Image 安全漏洞

Acronis True Image is a well-known data backup and restore software from Singapore-based Acronis. Acronis True Image 2020 version 24.5.22510 contains a denial of service vulnerability that stems from the program's logs being generated in a predictable pattern, allowing a non-privileged user to...

CVE-2020-9450: Incorrect Default Permissions

An issue was discovered in Acronis True Image 2020 24.5.22510. antiransomwareservice.exe exposes a REST API that can be used by everyone, even unprivileged users. This API is used to communicate from the GUI to antiransomwareservice.exe. This can be exploited to add an arbitrary malicious...

CVE-2020-9452: Improper Link Resolution Before File Access

An issue was discovered in Acronis True Image 2020 24.5.22510. antiransomwareservice.exe includes functionality to quarantine files by copying a suspected ransomware file from one directory to another using SYSTEM privileges. Because unprivileged users have write permissions in the quarantine...

CVE-2020-9451: Incorrect Default Permissions

An issue was discovered in Acronis True Image 2020 24.5.22510. antiransomwareservice.exe keeps a log in a folder where unprivileged users have write permissions. The logs are generated in a predictable pattern, allowing an unprivileged user to create a hardlink from a not yet created log file to...

PT-2021-12851

Name of the Vulnerable Software and Affected Versions: Acronis True Image 2020 version 24.5.22510 Description: An issue was discovered in the anti ransomware service.exe component, which exposes a REST API that can be accessed by all users, including unprivileged ones. This API is used for...

Local privilege escalation due to improper soft link handling

The issue could allow local users or malicious software to overwrite arbitrary files on the system. Workarounds Disable Acronis Active Protection service...

PT-2021-19795

Name of the Vulnerable Software and Affected Versions Acronis True Image versions prior to 2021 Update 4 for Windows Acronis True Image versions prior to 2021 Update 5 for Mac Acronis Agent versions prior to build 26653 Acronis Cyber Protect versions prior to build 27009 Description The issue is...

Acronis: IDOR on www.acronis.com API lead to steal private business user information

Summary Hi acronis team, i found an endpoint : www.acronis.com/en-us/api/v1/lead/id:929-HVV-335&token:mch-acronis.com- that is vulnerable to IDOR. with this vulnerability an attacker can steal private info such as company name, user name and surname, telephone number etc... Steps To Reproduce 1...

Acronis: Reflected XSS on my.acronis.com

Reflected XSS was possible on my.acronis.com via GET parameter "Error"...

Acronis: Cross-site Scripting (XSS) - Stored | forum.acronis.com

Summary There is an XSS vulnerability in the search function of the forum forum.acronis.com. Steps To Reproduce 1. Modify your own forum Nickname, add the following payload after the original nickname: alert0 2. Fill in your nickname in the Author form of the search function and wait for the...

Acronis: Reflected XSS on www.acronis.com/de-de/my/subscriptions/index.html

Vulnerability description not provided...

Acronis: Stored Cross-site Scripting on devicelock.com/forum/

Summary Hello, @acronis Team I hope you all doing well. I just found A Stored Cross-site Scripting on devicelock.com/forum/ by changing the City value on https://www.devicelock.com/bitrix/admin/useredit.php? to HTML/javascript code and lead to Stored Cross-site Scripting. 1. go to...

Acronis: admin password disclosure via log file

Hi I have log file disclose admin password on https://www.devicelock.com/log.txt u can see md5 password in log file , 2020-03-20 08:12:15 - main - Module: change password 4.1.2changepassword=yes;/forum/forumauth.php;login=admin;md5=2bca2f877b7a727861b59f4a4039d2e9 Impact this information admin...

Acronis: Information Disclosure via ZIP file on AWS Bucket [http://acronis.1.s3.amazonaws.com]

Summary Hello, @acronis Team I hope you all doing well. during My recon, I found OPEN S3 BUCKET http://acronis.1.s3.amazonaws.com and this BUCKET has an ZIP file . and this file contains sensitive information about the internal system of Acronis. This Zip file Is from 2018. And it looks like it w...

Acronis: Unrestricted file upload vulnerability in IMCE

Summary Steps To Reproduce POC 1. Go to "https://forum.acronis.com/" and creat user 1. Click on edit profile and go to Signature click on inser image usig imce file manger 1. Now upload php file and bypass to add .gif in the endpoint Recommendations...

Acronis: Account Confirmation bypass leads to acess some fucntionality

STEPS: 1. Go to the URL https://account.acronis.com//auth/signup 2. Create a Business Account 3. Intercept the request using burp suite 4. Now intercept the response of given HTTP REQUEST below 5. Change the field "confirmed":false to true 6. Even you can bypass Accept term condition by changing...

Acronis Cyber Protect Cross-Site Scripting Vulnerability

Acronis Cyber Protect is an application. Acronis Cyber Protect 15 Update 1 build 26172 has a cross-site scripting vulnerability that stems from cross-site scripting XSS in the console. . No detailed vulnerability details are available at this time...

Acronis Cyber Protect Access Control Error Vulnerability

Acronis Cyber Protect is an application. providing unified user network protection by integrating backup, disaster recovery, artificial intelligence-based malware protection, remote assistance and security into a single, reliable tool.Acronis Cyber Protect 15 Update 1 build 2617 Previous versions...