251 matches found
Sensitive information disclosure and manipulation due to missing authorization
...
Sensitive information disclosure and manipulation due to missing authorization
A vulnerability in Acronis Cyber Protect Cloud Agent could allow an unauthorized local attacker to see and manipulate network isolation policies applied to the specific agent...
Sensitive information disclosure and manipulation due to missing authorization
...
Sensitive information disclosure and manipulation due to missing authorization
...
Sensitive information disclosure due to excessive collection of system information
...
Sensitive information disclosure and manipulation due to missing authorization
...
Security update of zeromq/libzmq dependency
...
Sensitive information disclosure due to cleartext storage of sensitive information
...
Local privilege escalation due to insecure folder permissions
...
Remote command execution due to improper input validation
...
Sensitive information disclosure due to improper token expiration validation
...
Local privilege escalation due to insecure driver communication port permissions
...
Security update of jwt-go dependency
...
Sensitive information disclosure due to insecure registry permissions
...
Sensitive information disclosure due to insecure folder permissions
...
Sensitive information leak through log files
...
Local privilege escalation due to insecure folder permissions
...
Local privilege escalation due to a DLL hijacking vulnerability
...
Local privilege escalation due to excessive permissions assigned to child processes
...
Apache Log4j vulnerability
A critical security vulnerability has been identified in Apache Log4j library. The vulnerability has been assigned CVE-2021-44228. Apache Log4j JNDI Java Naming and Directory Interface features used in configuration, log messages, and parameters do not protect against attacker controlled LDAP and...
Stored cross-site scripting (XSS) was possible in protection plan details
...
Local privilege escalation due to insecure folder permissions
...
Missing SSL certificate validation
...
Local privilege escalation due to improper soft link handling
...
Local privilege escalation due to DLL hijacking vulnerability in multiple components
...
Acronis True Image fails to properly set ACLs of the C:\ProgramData\Acronis directory, which can allow privilege escalation
...
Acronis True Image is vulnerable to privilege escalation via openssl.cnf file
...
SSRF via Acronis Management Server
...
Local privilege escalation due to DLL hijacking vulnerability
...
Security update of Apache Tomcat dependency
...
Security update of OpenSSH dependency
The Qualys Threat Research Unit has released a security advisory for a remote unauthenticated code execution vulnerability in OpenSSH's server versions earlier than 4.4p1 and versions from 8.5p1 up to, but not including, 9.8p1. The issue was assigned CVE-2024-6387. Acronis security team concluded...
Local privilege escalation due to insecure folder permissions
...
Sensitive information disclosure and manipulation due to missing authorization
...
Local privilege escalation due to insecure folder permissions
...
Local privilege escalation due to DLL hijacking vulnerability
...
Sensitive information disclosure due to missing authorization
...
Sensitive information disclosure due to missing authorization
...
Sensitive information leak through log files
...
Local privilege escalation due to improper soft link handling
...
Sensitive information disclosure and manipulation due to missing authorization
...
Excessive attack surface due to binding to an unrestricted IP address
...
TLS/SSL weak cipher suites enabled
...
Security update of Swagger dependency
...
Local privilege escalation due to unrestricted loading of unsigned libraries
...
Sensitive information leak through log files
...
DLL hijacking could lead to local privilege escalation
...
Reflected Cross-site scripting (XSS) on login page
...
Local privilege escalation due to insecure folder permissions
...
Local privilege escalation due to improper soft link handling
The issue could allow local users or malicious software to overwrite arbitrary files on the system. Workarounds Disable Acronis Active Protection service...