CVE-2024-34012

The CVE-2024-34012 issue affects Acronis Cloud Manager (Windows) prior to build 6.2.24135.272. The root cause is insecure folder permissions, enabling local privilege escalation. Publicly documented details confirm the product/version impact and the local elevation vector, with no explicit exploi...

CVE-2024-34012

Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis Cloud Manager Windows before build 6.2.24135.272...

CVE-2024-34012

Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis Cloud Manager Windows before build 6.2.24135.272...

Acronis Cloud Manager Security Vulnerability

Acronis Cloud Manager is a cloud manager from Acronis Singapore that provides advanced monitoring, management, migration and recovery for Microsoft cloud environments of all shapes and sizes. A security vulnerability exists in Acronis Cloud Manager versions prior to 6.2.24135.272, which stems fro...

CVE-2024-34012: Incorrect Default Permissions

Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis Cloud Manager Windows before build 6.2.24135.272...

PT-2024-25640 · Acronis · Acronis Cloud Manager

Name of the Vulnerable Software and Affected Versions: Acronis Cloud Manager Windows versions prior to 6.2.24135.272 Description: The issue is related to local privilege escalation due to insecure folder permissions. Recommendations: For versions prior to 6.2.24135.272, update to a version newer...

Veritas System Recovery 安全漏洞

Veritas System Recovery is a fast, easy-to-use backup and recovery solution for Microsoft Windows servers from Veritas USA. A security vulnerability exists in versions prior to Veritas System Recovery 23.2Hotfix that stems from incorrect permissions on the Veritas System Recovery folder...

Local privilege escalation due to insecure folder permissions

...

PT-2024-3953 · Veritas · Veritas System Recovery

Name of the Vulnerable Software and Affected Versions: Veritas System Recovery versions prior to 23.3 Hotfix Description: The issue is related to incorrect permissions for the Veritas System Recovery folder, allowing low-privileged users to conduct attacks. Exploitation of this issue may enable a...

CVE-2023-51579

Voltronic Power ViewPower Incorrect Permission Assignment Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Voltronic Power ViewPower. An attacker must first obtain the ability to execute low-privileged code on...

CVE-2023-51579

Voltronic Power ViewPower Incorrect Permission Assignment Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Voltronic Power ViewPower. An attacker must first obtain the ability to execute low-privileged code on...

Voltronic Power ViewPower 安全漏洞

Voltronic Power ViewPower is Voltronic Power's monitoring and management software for solar inverters. Voltronic Power ViewPower suffers from an elevation of privilege vulnerability that is caused by incorrect permissions being set on a folder. An attacker could use this vulnerability to escalate...

CVE-2024-34011

Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis Cyber Protect Cloud Agent Windows before build 37758...

CVE-2024-34011

Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis Cyber Protect Cloud Agent Windows before build 37758...

CVE-2024-34011

CVE-2024-34011 affects Acronis Cyber Protect Cloud Agent on Windows prior to build 37758. The vulnerability is caused by insecure folder permissions that enable local privilege escalation. Exploitation details are not provided in the connected documents. The Red Hat and NVD entries corroborate lo...

PT-2024-25639

Name of the Vulnerable Software and Affected Versions Acronis Cyber Protect Cloud Agent Windows versions prior to build 37758 Description The issue is related to local privilege escalation due to insecure folder permissions. Recommendations For versions prior to build 37758, update to build 37758...

CVE-2024-34011: Incorrect Default Permissions

Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis Cyber Protect Cloud Agent Windows before build 37758...

Local privilege escalation due to insecure folder permissions

...

CVE-2024-27674: Incorrect Default Permissions

Macro Expert through 4.9.4 allows BUILTIN\Users:OICIM access to the "%PROGRAMFILESX86%\GrassSoft\Macro Expert" folder and thus an unprivileged user can escalate to SYSTEM by replacing the MacroService.exe binary...

CVE-2024-25958

Dell Grab for Windows, versions up to and including 5.0.4, contain Weak Application Folder Permissions vulnerability. A local authenticated attacker could potentially exploit this vulnerability, leading to privilege escalation, unauthorized access to application data, unauthorized modification of...