The vulnerability of the Acronis True Image backup and recovery software relates to security configuration errors during updates via HTTP. This allows a malicious actor to execute arbitrary code with administrator privileges.

The vulnerability of the Acronis True Image backup and recovery software relates to security configuration errors during updates via HTTP. In such updates, only those updates that use the MD5 hash provided by the server are verified. Exploiting this vulnerability allows an attacker to execute...