CVE-2023-48679

Stored cross-site scripting XSS vulnerability due to missing origin validation in postMessage. The following products are affected: Acronis Cyber Protect 16 Linux, Windows before build 37391...

CVE-2023-48679

CVE-2023-48679 affects Acronis Cyber Protect 16 (Linux/Windows) prior to build 37391. The vulnerability is a stored cross-site scripting (XSS) caused by missing origin validation in postMessage. The PT-2024-13620 entry confirms the affected versions and identifies the root cause as lack of origin...

CVE-2023-48678

CVE-2023-48678 affects Acronis Cyber Protect 16 (Linux and Windows) before build 37391. Root cause: insecure folder permissions leading to sensitive information disclosure. CVSS 3.1/3.0 base metrics indicate high confidentiality impact with local, low-complexity access and low privileges required...

CVE-2023-48678

Sensitive information disclosure due to insecure folder permissions. The following products are affected: Acronis Cyber Protect 16 Linux, Windows before build 37391...

CVE-2023-48678

Sensitive information disclosure due to insecure folder permissions. The following products are affected: Acronis Cyber Protect 16 Linux, Windows before build 37391...

CVE-2023-48677

Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect Home Office Windows before build 40901, Acronis Cyber Protect Cloud Agent Windows before build 39378, Acronis Cyber Protect 16 Windows before build 39938...

CVE-2023-45248

Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect Cloud Agent Windows before build 36497, Acronis Cyber Protect 16 Windows before build 37391...

CVE-2023-45248

Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect Cloud Agent Windows before build 36497, Acronis Cyber Protect 16 Windows before build 37391...

Privilege escalation

Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect Cloud Agent Windows before build 36497, Acronis Cyber Protect 16 Windows before build 37391...

CVE-2023-45248

Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect Cloud Agent Windows before build 36497, Acronis Cyber Protect 16 Windows before build 37391...

CVE-2023-45244

Sensitive information disclosure and manipulation due to missing authorization. The following products are affected: Acronis Cyber Protect Cloud Agent Linux, macOS, Windows before build 35895, Acronis Cyber Protect 16 Linux, macOS, Windows before build 37391...

Authorization

Sensitive information disclosure and manipulation due to missing authorization. The following products are affected: Acronis Cyber Protect Cloud Agent Linux, macOS, Windows before build 35895, Acronis Cyber Protect 16 Linux, macOS, Windows before build 37391...

CVE-2023-45244

Sensitive information disclosure and manipulation due to missing authorization. The following products are affected: Acronis Cyber Protect Cloud Agent Linux, macOS, Windows before build 35895, Acronis Cyber Protect 16 Linux, macOS, Windows before build 37391...

CVE-2023-44213

Sensitive information disclosure due to excessive collection of system information. The following products are affected: Acronis Cyber Protect Cloud Agent Windows before build 35739, Acronis Cyber Protect 16 Windows before build 37391...

CVE-2023-44211

Sensitive information disclosure and manipulation due to missing authorization. The following products are affected: Acronis Cyber Protect Cloud Agent Linux, macOS, Windows before build 31637, Acronis Cyber Protect 16 Linux, Windows before build 37391...

CVE-2023-44213

Sensitive information disclosure due to excessive collection of system information. The following products are affected: Acronis Cyber Protect Cloud Agent Windows before build 35739, Acronis Cyber Protect 16 Windows before build 37391...

CVE-2023-44211

Sensitive information disclosure and manipulation due to missing authorization. The following products are affected: Acronis Cyber Protect Cloud Agent Linux, macOS, Windows before build 31637, Acronis Cyber Protect 16 Linux, Windows before build 37391...

Authorization

Sensitive information disclosure and manipulation due to missing authorization. The following products are affected: Acronis Cyber Protect Cloud Agent Linux, macOS, Windows before build 31637, Acronis Cyber Protect 16 Linux, Windows before build 37391...

Information disclosure

Sensitive information disclosure due to excessive collection of system information. The following products are affected: Acronis Cyber Protect Cloud Agent Windows before build 35739, Acronis Cyber Protect 16 Windows before build 37391...

Information disclosure

Sensitive information leak through log files. The following products are affected: Acronis Cyber Protect Cloud Agent Linux, macOS, Windows before build 35739, Acronis Cyber Protect 16 Linux, macOS, Windows before build 37391...