248 matches found
Remote command execution due to improper input validation
...
Local privilege escalation during recovery due to improper soft link handling
...
Sensitive information disclosure due to improper token expiration validation
...
Sensitive information disclosure due to excessive collection of system information
...
Local privilege escalation due to a DLL hijacking vulnerability
...
Security update of jwt-go dependency
...
Local privilege escalation due to incomplete uninstallation cleanup
...
Security update of OpenSSL dependency
...
Sensitive information disclosure due to insecure registry permissions
...
High severity vulnerabilities in OpenSSL 3.0
The OpenSSL project team released a security advisory for two high severity security issues affecting OpenSSL versions 3.0.0-3.0.6 and fixed in OpenSSL 3.0.7. The issues were assigned CVE-2022-3602 and CVE-2022-3786. Acronis security team concluded that Acronis infrastructure and products are not...
Security update of Log4net dependency
...
Security update of Swagger dependency
...
Local privilege escalation due to a DLL hijacking vulnerability
...
Stored cross-site scripting (XSS) was possible in activity details
...
Sensitive information leak through log files
...
Local privilege escalation due to a binary hijacking vulnerability
...
Local privilege escalation due to insecure folder permissions
...
Acronis True Image is vulnerable to privilege escalation via openssl.cnf file
...
Acronis Cyber Backup is vulnerable to privilege escalation via openssl.cnf file
...
Local privilege escalation due to DLL hijacking vulnerability
...
Weak server key used for TLS encryption
...
Sensitive information disclosure due to missing authentication
...
Sensitive information disclosure during file browsing due to improper symbolic link handling
Acronis Backup plugin for cPanel & WHM had a vulnerability in handling symbolic links during file browsing. This vulnerability allowed plugin users with unprivileged local access to the server to view file names in directories they normally could not access. By creating a symbolic link in their...
Sensitive information disclosure due to spell-jacking
...
Local privilege escalation due to DLL hijacking vulnerability
...
Remote command execution due to use of default passwords
...
Local privilege escalation due to OS command injection vulnerability
...
Local privilege escalation due to insecure folder permissions
...
Local privilege escalation due to insecure folder permissions
...
Sensitive information disclosure and manipulation due to missing authorization
...
Security update of Crow dependency
...
Sensitive information disclosure due to insecure folder permissions
...
Self cross-site scripting (XSS) vulnerability in storage nodes search field
...
Local privilege escalation due to DLL hijacking vulnerability
...
Sensitive information leak through log files
...
Sensitive information disclosure due to missing authorization
...
Sensitive information disclosure and manipulation due to missing authorization
...
Sensitive information disclosure due to cleartext storage of sensitive information
...
Sensitive information disclosure due to spell-jacking
...
Sensitive information disclosure and manipulation due to improper authorization
...
Local privilege escalation due to insecure driver communication port permissions
...
Sensitive information disclosure due to excessive collection of system information
...
Sensitive information disclosure due to CORS misconfiguration
...
Sensitive information disclosure due to insecure folder permissions
...
TLS/SSL weak cipher suites enabled
...
Sensitive information disclosure due to improper authentication
...
Local privilege escalation due to insecure folder permissions
...
Sensitive information leak through log files
...