251 matches found
Credentials are not deleted from Acronis Agent after plan revocation
...
Unauthorized resource manipulation due to improper authorization checks
...
Local privilege escalation due to insecure Unix socket permissions
...
Local privilege escalation due to improper directory permissions
...
Unauthorized data access due to insufficient access control validation
...
Weak server key used for TLS encryption
...
Local privilege escalation due to insecure file permissions
...
Security update of libxml2 dependency
...
Security update of cURL dependency
...
Local privilege escalation due to DLL hijacking vulnerability
...
Local privilege escalation due to excessive permissions assigned to Tray Monitor service
...
Security update of Electron dependency
...
Local privilege escalation due to DLL hijacking vulnerability
...
Excessive attack surface in acep-collector service due to binding to an unrestricted IP address
...
Sensitive information manipulation due to improper authorization
...
Sensitive data disclosure and manipulation due to unnecessary privileges assignment
...
Remote command execution due to use of default passwords
...
XZ Utils supply chain attack
Red Hat team released a security advisory for a supply chain compromise discovered in the XZ Utils library versions 5.6.0 and 5.6.1. The issue was assigned CVE-2024-3094. Acronis security team concluded that Acronis infrastructure and products are not affected by this vulnerability...
Self cross-site scripting (XSS) vulnerability in storage nodes search field
...
Sensitive information disclosure due to insecure folder permissions
...
Stored cross-site scripting (XSS) vulnerability due to missing origin validation in postMessage
...
Sensitive information disclosure due to missing authorization
...
Sensitive information disclosure due to missing authorization
...
Sensitive information disclosure due to spell-jacking
...
Sensitive information leak through log files
...
Sensitive information disclosure due to improper authorization
...
Local privilege escalation due to unrestricted loading of unsigned libraries
...
Local privilege escalation during installation due to improper soft link handling
...
Local privilege escalation during recovery due to improper soft link handling
...
Sensitive information leak through log files
...
Local privilege escalation due to a DLL hijacking vulnerability
...
Sensitive information disclosure and manipulation due to improper certification validation
...
Sensitive information disclosure due to insecure folder permissions
...
Sensitive information disclosure due to insecure folder permissions
...
Local privilege escalation due to a binary hijacking vulnerability
...
A logic bug in system monitoring driver allows to bypass Windows memory protection and access sensitive data
...
Denial of service due to insecure folder permissions
...
Local privilege escalation due to insecure folder permissions
...
Acronis Cyber Backup is vulnerable to privilege escalation via openssl.cnf file
...
Local privilege escalation due to DLL hijacking vulnerability
...
Sensitive information disclosure and manipulation due to improper authentication
...
Sensitive data disclosure and manipulation due to improper authentication
...
Denial of service due to improper handling of malformed input
...
Security update of cURL dependency
...
Local privilege escalation due to DLL hijacking vulnerability
...
Weak algorithm used to sign RPM package
...
Stored cross-site scripting (XSS) vulnerability on enrollment invitation page
...
Local privilege escalation due to DLL hijacking vulnerability
...