PT-2023-5315 · Acronis · Acronis Cloud Manager

Name of the Vulnerable Software and Affected Versions: Acronis Cloud Manager Windows versions before 6.2.23089.203 Description: The issue is related to sensitive information disclosure due to unauthenticated path traversal and improper input validation. This allows a remote attacker to access...

Acronis Cloud Manager 输入验证错误漏洞

Acronis Cloud Manager is a cloud manager from Acronis Singapore that provides advanced monitoring, management, migration, and recovery for Microsoft cloud environments of all shapes and sizes. Acronis Cloud Manager suffers from an input validation error vulnerability that stems from improper inpu...

Acronis Cloud Manager 输入验证错误漏洞

Acronis Cloud Manager is a cloud manager from Acronis Singapore that provides advanced monitoring, management, migration, and recovery for Microsoft cloud environments of all shapes and sizes. A security vulnerability exists in Acronis Cloud Manager that originates from improper input validation...

PT-2023-5317 · Acronis · Acronis Cloud Manager

Name of the Vulnerable Software and Affected Versions: Acronis Cloud Manager Windows versions before 6.2.23089.203 Description: The issue is related to remote command execution due to improper input validation. This allows a remote attacker to execute arbitrary commands. Recommendations: For...

Acronis Cloud Manager 输入验证错误漏洞

Acronis Cloud Manager is a cloud manager from Acronis Singapore that provides advanced monitoring, management, migration, and recovery for Microsoft cloud environments of all shapes and sizes. A security vulnerability exists in Acronis Cloud Manager that originates from improper input validation...

Acronis: CSS Injection via Client Side Path Traversal + Open Redirect leads to personal data exfiltration on Acronis Cloud

Summary Hi team, I hope everything goes well. I have found a CSS Injection in Acronis Cloud Management Consolehttps://mc-beta-cloud.acronis.com/mc via the colorscheme GET parameter. Description: The flow work as I will comment below. If we go to the URL...

Acronis: SSRF when configuring Website Backup on Acronis Cloud

Hi, I hope everything goes well. I have found a SSRF in https://mc-beta-cloud.acronis.com/ui//backup-console/resources when configuring the backup plan for a website. Summary While I was looking at the functionality of managing backups on websites, I saw that if you specify a local IP where to ge...