CVE-2022-29550

An issue was discovered in Qualys Cloud Agent 4.8.0-49. It writes "ps auxwwe" output to the /var/log/qualys/qualys-cloud-agent-scan.log file. This may, for example, unexpectedly write credentials from environment variables to disk in cleartext. NOTE: there are no common circumstances in which...

CVE-2022-29549

An issue was discovered in Qualys Cloud Agent 4.8.0-49. It executes programs at various full pathnames without first making ownership and permission checks e.g., to help ensure that a program was installed by root and without integrity checks e.g., a checksum comparison against known legitimate...

CVE-2022-29052

Jenkins Google Compute Engine Plugin 4.3.8 and earlier stores private keys unencrypted in cloud agent config.xml files on the Jenkins controller where they can be viewed by users with Extended Read permission, or access to the Jenkins controller file system...

CVE-2020-35464

Version 1.3.0 of the Weave Cloud Agent Docker image contains a blank password for the root user. Systems deployed using affected versions of the Weave Cloud Agent container may allow a remote attacker to achieve root access with a blank password...

Security, Uninterrupted: Inside Qualys’ Zero-Touch Security Vision with Qualys Cloud Agent

New Feature: Remote Log Collection for Seamless Troubleshooting and Analysis In the modern enterprise, where resilience and scale are non-negotiable, the margin for error in cybersecurity has all but disappeared. Yet the tools available to security teams remain tethered to legacy...

CVE-2025-30409

Denial of service due to allocation of resources without limits. The following products are affected: Acronis Cyber Protect Cloud Agent Windows before build 39904, Acronis Cyber Protect 17 Windows before build 41186...

CVE-2025-30408

Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis Cyber Protect Cloud Agent Windows before build 39904, Acronis Cyber Protect 16 Windows before build 39938...

CVE-2025-30408

Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis Cyber Protect Cloud Agent Windows before build 39904, Acronis Cyber Protect 16 Windows before build 39938...

CVE-2025-30409

Denial of service due to allocation of resources without limits. The following products are affected: Acronis Cyber Protect Cloud Agent Windows before build 39904, Acronis Cyber Protect 17 Windows before build 41186...

CVE-2025-30409

CVE-2025-30409 affects Acronis Cyber Protect Cloud Agent (Windows) prior to build 39904. The issue is a denial of service caused by allocation of resources without limits, leading to availability impact as described in multiple feeds. The Red Hat, NVD, and CVE records consistently cite this vulne...

CVE-2025-30408

Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis Cyber Protect Cloud Agent Windows before build 39904, Acronis Cyber Protect 16 Windows before build 39938...

CVE-2025-30408

CVE-2025-30408 is a local privilege escalation affecting Acronis Cyber Protect Cloud Agent (Windows) before build 39904 and Acronis Cyber Protect 16 before build 39938. The root cause is insecure folder permissions that could allow elevation of privileges. Public sources confirm affected versions...

PT-2025-17729 · Acronis · Acronis Cyber Protect Cloud Agent

Name of the Vulnerable Software and Affected Versions: Acronis Cyber Protect Cloud Agent Windows versions prior to build 39904 Description: The issue is related to a denial of service due to the allocation of resources without limits. Recommendations: For versions prior to build 39904, update to...

Acronis Cyber Protect Cloud Agent 安全漏洞

Acronis Cyber Protect Cloud Agent is a cloud agent from Acronis Switzerland. A security vulnerability exists in Acronis Cyber Protect Cloud Agent versions prior to 39904, which stems from an unrestricted resource allocation and could lead to a denial of service attack...

Acronis Cyber Protect Cloud Agent 安全漏洞

Acronis Cyber Protect Cloud Agent is a cloud agent from Acronis Switzerland. A security vulnerability exists in Acronis Cyber Protect Cloud Agent versions prior to 39904, which stems from insecure folder permissions that could lead to local elevation of privileges...

PT-2025-17728 · Acronis · Acronis Cyber Protect Cloud Agent

Name of the Vulnerable Software and Affected Versions: Acronis Cyber Protect Cloud Agent Windows versions prior to build 39904 Description: The issue is related to local privilege escalation due to insecure folder permissions. Recommendations: For versions prior to build 39904, update to build...

CVE-2025-30407

Local privilege escalation due to a binary hijacking vulnerability. The following products are affected: Acronis Cyber Protect Cloud Agent Windows before build 39713...

CVE-2025-30407

Local privilege escalation due to a binary hijacking vulnerability. The following products are affected: Acronis Cyber Protect Cloud Agent Windows before build 39713...

CVE-2025-30407

Local privilege escalation due to a binary hijacking vulnerability. The following products are affected: Acronis Cyber Protect Cloud Agent Windows before build 39713...

CVE-2025-30407

CVE-2025-30407 describes a local privilege escalation in the Acronis Cyber Protect Cloud Agent (Windows) prior to build 39713, caused by a binary hijacking issue. Publicly reported details in multiple feeds confirm the affected product and version range, as well as the root cause (binary hijackin...