248 matches found
Excessive attack surface in acep-importer service due to binding to an unrestricted IP address
...
Security update of Crow dependency
...
Excessive attack surface in archive-server service due to binding to an unrestricted IP address
...
Security update of OpenSSH dependency
The Qualys Threat Research Unit has released a security advisory for a remote unauthenticated code execution vulnerability in OpenSSH's server versions earlier than 4.4p1 and versions from 8.5p1 up to, but not including, 9.8p1. The issue was assigned CVE-2024-6387. Acronis security team concluded...
Stored cross-site scripting (XSS) vulnerability in unit name
...
Sensitive information disclosure due to excessive collection of system information
...
Local privilege escalation due to DLL hijacking vulnerability
...
Sensitive information disclosure due to missing authorization
...
Local privilege escalation during installation due to improper soft link handling
...
Sensitive information disclosure due to unauthenticated path traversal
Sensitive information disclosure was possible in Acronis Cloud Manager before build 6.2.23089.203 due to an unauthenticated path traversal vulnerability. This allowed an unauthenticated user on an adjacent network to read local files on the machine where Acronis Cloud Manager was installed...
Sensitive information leak through log files
...
Code execution and sensitive information disclosure due to excessive privileges assigned to Acronis Agent
...
Sensitive information disclosure and manipulation due to improper certification validation
...
Sensitive information disclosure due to excessive privileges assigned to Acronis Agent
...
Sensitive information disclosure due to insecure folder permissions
...
Local privilege escalation due to excessive permissions assigned to child processes
...
DLL hijacking could lead to local privilege escalation
...
Missing SSL certificate validation
...
Local privilege escalation due to DLL hijacking vulnerability in multiple components
...
Local privilege escalation due to EXE hijacking vulnerability
...
Local privilege escalation due to insecure folder permissions
...
Sensitive information disclosure and manipulation due to improper authentication
...
Unauthorized resource manipulation due to improper authorization checks
...
Sensitive data disclosure and manipulation due to missing authentication
...
Sensitive data disclosure and manipulation due to missing authorization
...
Local privilege escalation due to DLL hijacking vulnerability
...
Local privilege escalation due to DLL hijacking vulnerability
...
Local privilege escalation due to insecure folder permissions
...
Local privilege escalation due to DLL hijacking vulnerability
...
Weak algorithm used to sign RPM package
...
Stored cross-site scripting (XSS) vulnerability on enrollment invitation page
...
Local privilege escalation due to DLL hijacking vulnerability
...
Sensitive information manipulation due to improper authorization
...
Excessive attack surface in acep-collector service due to binding to an unrestricted IP address
...
Local privilege escalation due to DLL hijacking vulnerability
...
Sensitive data disclosure and manipulation due to unnecessary privileges assignment
...
Sensitive information disclosure and manipulation due to missing authorization
...
XZ Utils supply chain attack
Red Hat team released a security advisory for a supply chain compromise discovered in the XZ Utils library versions 5.6.0 and 5.6.1. The issue was assigned CVE-2024-3094. Acronis security team concluded that Acronis infrastructure and products are not affected by this vulnerability...
Stored cross-site scripting (XSS) vulnerability due to missing origin validation in postMessage
...
Sensitive information disclosure and manipulation due to missing authorization
A vulnerability in Acronis Cyber Protect Cloud Agent could allow an unauthorized local attacker to see and manipulate network isolation policies applied to the specific agent...
Security update of cURL dependency
...
Sensitive information disclosure and manipulation due to missing authorization
A vulnerability in Acronis Agent could allow an unauthorized local attacker to see and manipulate antivirus and antimalware protection plans applied to the specific agent. This vulnerability does not allow unauthorized access to backup data...
Sensitive information disclosure due to excessive collection of system information
...
Sensitive information disclosure and manipulation due to missing authorization
...
Sensitive information disclosure due to missing authorization
...
Sensitive information disclosure due to missing authorization
...
Sensitive information disclosure and manipulation due to missing authorization
...
Security update of cURL dependency
...