247 matches found
Local privilege escalation due to insecure folder permissions
...
Local privilege escalation due to a DLL hijacking vulnerability
...
Local privilege escalation due to DLL hijacking vulnerability
...
Local privilege escalation via named pipe due to improper access control checks
...
Stored cross-site scripting (XSS) was possible in protection plan details
...
Self cross-site scripting (XSS) was possible on devices page
...
Security update of sqlite3 dependency
...
Local privilege escalation due to a DLL hijacking vulnerability
...
Local privilege escalation due to insecure folder permissions
...
Local privilege escalation due to insecure XPC service configuration
...
Denial of service due to insecure folder permissions
...
Missing SSL certificate validation
...
Local privilege escalation due to a DLL hijacking vulnerability
...
Acronis True Image fails to properly set ACLs of the C:\ProgramData\Acronis directory, which can allow privilege escalation
...
SSRF via Acronis Management Server
...
Default credentials set for local privileged user in Virtual Appliance
...
Sensitive data disclosure and manipulation due to improper authentication
...
Sensitive data disclosure and manipulation due to missing authentication
...
Local privilege escalation due to insecure folder permissions
...
Local privilege escalation due to insecure folder permissions
...
Security update of libxml2 dependency
...
Local privilege escalation due to DLL hijacking vulnerability
...
Local privilege escalation due to DLL hijacking vulnerability
...
Local privilege escalation due to DLL hijacking vulnerability
...
Local privilege escalation due to DLL hijacking vulnerability
...
Cleartext transmission of sensitive information in acep-collector service
...
Excessive attack surface in archive-server service due to binding to an unrestricted IP address
...
Local privilege escalation due to insecure folder permissions
...
Local privilege escalation due to insecure folder permissions
...
Sensitive information disclosure and manipulation due to missing authorization
...
XZ Utils supply chain attack
Red Hat team released a security advisory for a supply chain compromise discovered in the XZ Utils library versions 5.6.0 and 5.6.1. The issue was assigned CVE-2024-3094. Acronis security team concluded that Acronis infrastructure and products are not affected by this vulnerability...
Sensitive information disclosure due to insecure folder permissions
...
Local privilege escalation due to DLL hijacking vulnerability
...
Local privilege escalation due to DLL hijacking vulnerability
...
Sensitive information disclosure and manipulation due to missing authorization
A vulnerability in Acronis Agent could allow an unauthorized local attacker to see and manipulate antivirus and antimalware protection plans applied to the specific agent. This vulnerability does not allow unauthorized access to backup data...
Sensitive information leak through log files
...
Sensitive information disclosure and manipulation due to missing authorization
...
Sensitive information disclosure due to missing authorization
...
Sensitive information disclosure due to missing authorization
...
Sensitive information disclosure and manipulation due to missing authorization
...
Security update of zlib dependency
...
Sensitive information disclosure due to insufficient token field masking
...
Stored cross-site scripting (XSS) vulnerability in protection plan name
...
Security update of cURL dependency
...
Sensitive information disclosure due to spell-jacking
...
Replace satori/go.uuid dependency
...
Sensitive information disclosure due to improper authorization
...
Security update of zeromq/libzmq dependency
...