247 matches found
Sensitive information disclosure due to missing authentication
...
Security update of Electron dependency
...
Security update of Apache Tomcat dependency
...
Excessive attack surface in acep-importer service due to binding to an unrestricted IP address
...
Sensitive information manipulation due to improper authorization
...
Security update of Crow dependency
...
Excessive attack surface in acep-collector service due to binding to an unrestricted IP address
...
Local active protection service settings manipulation due to unnecessary privileges assignment
...
Local privilege escalation due to DLL hijacking vulnerability
...
Local privilege escalation due to DLL hijacking vulnerability
...
Local privilege escalation due to DLL hijacking vulnerability
...
Local privilege escalation due to OS command injection vulnerability
...
Security update of OpenSSH dependency
The Qualys Threat Research Unit has released a security advisory for a remote unauthenticated code execution vulnerability in OpenSSH's server versions earlier than 4.4p1 and versions from 8.5p1 up to, but not including, 9.8p1. The issue was assigned CVE-2024-6387. Acronis security team concluded...
Local privilege escalation due to unquoted search path vulnerability
...
Security update of Crow dependency
...
Sensitive information disclosure due to excessive collection of system information
...
Stored cross-site scripting (XSS) vulnerability due to missing origin validation in postMessage
...
Self cross-site scripting (XSS) vulnerability in storage nodes search field
...
Sensitive information disclosure and manipulation due to missing authorization
A vulnerability in Acronis Cyber Protect Cloud Agent could allow an unauthorized local attacker to see and manipulate network isolation policies applied to the specific agent...
Sensitive information disclosure and manipulation due to missing authorization
...
Sensitive information disclosure and manipulation due to missing authorization
...
Sensitive information disclosure due to excessive collection of system information
...
Sensitive information disclosure and manipulation due to missing authorization
...
Local privilege escalation due to improper soft link handling
...
Sensitive information disclosure and manipulation due to missing authorization
...
Sensitive information disclosure due to cleartext storage of sensitive information
...
Sensitive information disclosure and manipulation due to improper authentication
...
Sensitive information disclosure and manipulation due to improper authorization
...
Local privilege escalation due to insecure folder permissions
...
Local privilege escalation due to unrestricted loading of unsigned libraries
...
Local privilege escalation during installation due to improper soft link handling
...
Sensitive information leak through log files
...
Remote command execution due to improper input validation
...
Sensitive information disclosure due to improper token expiration validation
...
Sensitive information disclosure due to excessive collection of system information
...
Local privilege escalation due to unrestricted loading of unsigned libraries
...
Local privilege escalation due to a DLL hijacking vulnerability
...
Code execution and sensitive information disclosure due to excessive privileges assigned to Acronis Agent
...
Sensitive information disclosure and manipulation due to improper authorization
...
Local privilege escalation due to incomplete uninstallation cleanup
...
TLS/SSL weak cipher suites enabled
...
Security update of OpenSSL dependency
...
Security update of jwt-go dependency
...
Sensitive information leak through log files
...
High severity vulnerabilities in OpenSSL 3.0
The OpenSSL project team released a security advisory for two high severity security issues affecting OpenSSL versions 3.0.0-3.0.6 and fixed in OpenSSL 3.0.7. The issues were assigned CVE-2022-3602 and CVE-2022-3786. Acronis security team concluded that Acronis infrastructure and products are not...
Security update of Swagger dependency
...
Cleartext transmission of sensitive information
...
Cleartext transmission of sensitive information
...