103 matches found
CVE-2024-49382
The CVE-2024-49382 issue affects Acronis Cyber Protect 16 (Linux and Windows) prior to build 38690. The archive-server service binds to an unrestricted IP address, creating an excessive attack surface due to exposure. A confirmed remediation is to update to build 38690 or later; PT Security also ...
CVE-2024-49382
Excessive attack surface in archive-server service due to binding to an unrestricted IP address. The following products are affected: Acronis Cyber Protect 16 Linux, Windows before build 38690...
PT-2024-7384 · Acronis · Acronis Cyber Protect
Name of the Vulnerable Software and Affected Versions: Acronis Cyber Protect 16 versions prior to build 38690 Description: The issue is related to the cleartext transmission of sensitive information in the acep-collector service, which may allow a remote attacker to gain unauthorized access to...
PT-2024-25638 · Acronis · Acronis Cyber Protect 16 +1
Name of the Vulnerable Software and Affected Versions: Acronis Cyber Protect Cloud Agent Windows versions before build 37758 Acronis Cyber Protect 16 Windows versions before build 38690 Description: The issue is related to a local privilege escalation due to an unquoted search path vulnerability...
PT-2024-13624 · Acronis · Acronis Cyber Protect 16 +1
Name of the Vulnerable Software and Affected Versions: Acronis Cyber Protect Cloud Agent versions before build 37758 Acronis Cyber Protect 16 versions before build 39169 Description: The issue is related to sensitive information disclosure and manipulation due to missing authorization...
CVE-2023-48682
Stored cross-site scripting XSS vulnerability in unit name. The following products are affected: Acronis Cyber Protect 16 Linux, Windows before build 37391...
CVE-2023-48678
Sensitive information disclosure due to insecure folder permissions. The following products are affected: Acronis Cyber Protect 16 Linux, Windows before build 37391...
CVE-2023-48679
Stored cross-site scripting XSS vulnerability due to missing origin validation in postMessage. The following products are affected: Acronis Cyber Protect 16 Linux, Windows before build 37391...
Information disclosure
Sensitive information disclosure due to excessive collection of system information. The following products are affected: Acronis Cyber Protect 16 macOS, Windows before build 37391...
Cross site scripting
Stored cross-site scripting XSS vulnerability due to missing origin validation in postMessage. The following products are affected: Acronis Cyber Protect 16 Linux, Windows before build 37391...
Information disclosure
Sensitive information disclosure due to insecure folder permissions. The following products are affected: Acronis Cyber Protect 16 Linux, Windows before build 37391...
Cross site scripting
Stored cross-site scripting XSS vulnerability in unit name. The following products are affected: Acronis Cyber Protect 16 Linux, Windows before build 37391...
Cross site scripting
Self cross-site scripting XSS vulnerability in storage nodes search field. The following products are affected: Acronis Cyber Protect 16 Linux, Windows before build 37391...
CVE-2023-48682
Stored cross-site scripting XSS vulnerability in unit name. The following products are affected: Acronis Cyber Protect 16 Linux, Windows before build 37391...
CVE-2023-48682
CVE-2023-48682 is a stored XSS in the unit name of Acronis Cyber Protect 16 (Linux/Windows) prior to build 37391. The vulnerability is due to unsanitized unit-name input, with impact limited to higher-risk confidentiality and integrity in some disclosures, and no availability impact. A fixed vers...
CVE-2023-48682
Stored cross-site scripting XSS vulnerability in unit name. The following products are affected: Acronis Cyber Protect 16 Linux, Windows before build 37391...
CVE-2023-48681
Acronis Cyber Protect 16 (Linux, Windows) before build 37391 has a self XSS vulnerability in the storage nodes search field. The issue allows execution of malicious scripts in the app context. Mitigation: upgrade to build 37391 or later; as a temporary workaround, restrict access to the storage n...
CVE-2023-48680
CVE-2023-48680 affects Acronis Cyber Protect 16 (macOS, Windows) prior to build 37391. The issue is an information disclosure caused by excessive collection of system information. Impact is information disclosure with confidentiality impact (per CVSS) and is described as a local issue. Remediatio...