CVE-2020-9452

An issue was discovered in Acronis True Image 2020 24.5.22510. antiransomwareservice.exe includes functionality to quarantine files by copying a suspected ransomware file from one directory to another using SYSTEM privileges. Because unprivileged users have write permissions in the quarantine...

CVE-2015-4322: Undefined Security Weakness

Cisco Content Security Management Appliance SMA 8.3.6-039, 9.1.0-31, and 9.1.0-103 improperly restricts the privileges available after LDAP authentication, which allows remote authenticated users to read or write to an arbitrary user's Spam Quarantine folder by visiting a spam-notification URL, a...

PT-2015-6518

Name of the Vulnerable Software and Affected Versions Cisco Content Security Management Appliance SMA versions 8.3.6-039, 9.1.0-31, 9.1.0-103 Description The issue improperly restricts privileges after LDAP authentication, allowing remote authenticated users to access an arbitrary user's Spam...