CVE-2024-36365: Incorrect Authorization

In JetBrains TeamCity before 2022.04.7, 2022.10.6, 2023.05.6, 2023.11.5, 2024.03.2 a third-party agent could impersonate a cloud agent...

Introducing CyberSecurity Asset Management 3.0 with Expanded Discovery and Cyber Risk Assessment

Qualys is re-defining attack surface management with CyberSecurity Asset Management CSAM 3.0, expanding the most comprehensive attack surface coverage on the market to include patent-pending EASM discovery and scan, passive sensing for unmanaged/untrusted devices built in to the Qualys agent, and...

CVE-2024-34011

Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis Cyber Protect Cloud Agent Windows before build 37758...

CVE-2024-34010

Local privilege escalation due to unquoted search path vulnerability. The following products are affected: Acronis Cyber Protect Cloud Agent Windows before build 37758, Acronis Cyber Protect 16 Windows before build 38690, Acronis True Image Windows before build 42386, Acronis True Image OEM Windo...

CVE-2023-48684

Sensitive information disclosure and manipulation due to missing authorization. The following products are affected: Acronis Cyber Protect Cloud Agent Linux, macOS, Windows before build 37758, Acronis Cyber Protect 17 Linux, macOS, Windows before build 41186...

CVE-2023-48684

Sensitive information disclosure and manipulation due to missing authorization. The following products are affected: Acronis Cyber Protect Cloud Agent Linux, macOS, Windows before build 37758, Acronis Cyber Protect 17 Linux, macOS, Windows before build 41186...

CVE-2023-48683

Sensitive information disclosure and manipulation due to missing authorization. The following products are affected: Acronis Cyber Protect Cloud Agent Linux, macOS, Windows before build 37758, Acronis Cyber Protect 16 Linux, macOS, Windows before build 39169...

CVE-2024-34011

Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis Cyber Protect Cloud Agent Windows before build 37758...

CVE-2024-34011

Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis Cyber Protect Cloud Agent Windows before build 37758...

CVE-2024-34011

CVE-2024-34011 affects Acronis Cyber Protect Cloud Agent on Windows prior to build 37758. The vulnerability is caused by insecure folder permissions that enable local privilege escalation. Exploitation details are not provided in the connected documents. The Red Hat and NVD entries corroborate lo...

CVE-2024-34010

Local privilege escalation due to unquoted search path vulnerability. The following products are affected: Acronis Cyber Protect Cloud Agent Windows before build 37758, Acronis Cyber Protect 16 Windows before build 38690, Acronis True Image Windows before build 42386, Acronis True Image OEM Windo...

CVE-2024-34010

CVE-2024-34010 describes a local privilege escalation in Acronis software due to an unquoted search path. Affected Windows products and builds include: Acronis Cyber Protect Cloud Agent before 37758, Acronis Cyber Protect 16 before 38690, and Acronis True Image before 42386. The root cause is an ...

CVE-2023-48684

Sensitive information disclosure and manipulation due to missing authorization. The following products are affected: Acronis Cyber Protect Cloud Agent Linux, macOS, Windows before build 37758, Acronis Cyber Protect 17 Linux, macOS, Windows before build 41186...

CVE-2023-48684

Sensitive information disclosure and manipulation due to missing authorization. The following products are affected: Acronis Cyber Protect Cloud Agent Linux, macOS, Windows before build 37758, Acronis Cyber Protect 17 Linux, macOS, Windows before build 41186...

CVE-2023-48683

CVE-2023-48683 affects Acronis Cyber Protect Cloud Agent (Linux, macOS, Windows) before build 37758 and Acronis Cyber Protect 16 before build 39169. Root cause: missing authorization enabling sensitive information disclosure and manipulation. CVSSv3.0 base score 7.1 (HIGH) with LOCAL attack vecto...

CVE-2023-48683

Sensitive information disclosure and manipulation due to missing authorization. The following products are affected: Acronis Cyber Protect Cloud Agent Linux, macOS, Windows before build 37758, Acronis Cyber Protect 16 Linux, macOS, Windows before build 39169...

CVE-2023-48683

Sensitive information disclosure and manipulation due to missing authorization. The following products are affected: Acronis Cyber Protect Cloud Agent Linux, macOS, Windows before build 37758, Acronis Cyber Protect 16 Linux, macOS, Windows before build 39169...

PT-2024-13625

Name of the Vulnerable Software and Affected Versions Acronis Cyber Protect Cloud Agent versions before build 37758 Description The issue is related to sensitive information disclosure and manipulation due to missing authorization. This affects Acronis Cyber Protect Cloud Agent on Linux, macOS, a...

PT-2024-25639

Name of the Vulnerable Software and Affected Versions Acronis Cyber Protect Cloud Agent Windows versions prior to build 37758 Description The issue is related to local privilege escalation due to insecure folder permissions. Recommendations For versions prior to build 37758, update to build 37758...

Acronis Cyber Protect and Acronis Cyber Protect Cloud Agent security vulnerabilities

Acronis Cyber Protect and Acronis Cyber Protect Cloud Agent are both products of Acronis Switzerland.Acronis Cyber Protect is an all-in-one network protection solution for business and enterprise. Combining backup, anti-malware, network security and endpoint management features such as...