247 matches found
Remote command execution due to improper input validation
...
Sensitive information disclosure due to missing authorization
...
MOVEit transfer critical vulnerability
The Progress Community team released a security advisory and fixes for one critical severity security issue affecting all MOVEit Transfer versions. The issue was assigned CVE-2023-34362. Acronis security team concluded that Acronis infrastructure and products are not affected by this vulnerabilit...
Sensitive information disclosure due to improper authorization
...
Sensitive information disclosure due to insecure folder permissions
...
Sensitive information disclosure and manipulation due to improper certification validation
...
Sensitive information disclosure due to improper authentication
...
Local privilege escalation due to insecure folder permissions
...
Sensitive information disclosure due to excessive privileges assigned to Acronis Agent
...
Local privilege escalation due to improper soft link handling
...
Local privilege escalation due to insecure folder permissions
...
Sensitive information disclosure due to insecure folder permissions
...
Local privilege escalation due to insecure folder permissions
...
Stored cross-site scripting (XSS) was possible in activity details
...
Cross-site scripting (XSS) was possible in notification pop-ups
...
DLL hijacking could lead to local privilege escalation
...
Reflected Cross-site scripting (XSS) on login page
...
Local privilege escalation due to a binary hijacking vulnerability
...
Local privilege escalation due to insecure XPC service configuration
...
Local privilege escalation due to insecure folder permissions
...
Local privilege escalation due to improper soft link handling
The issue could allow local users or malicious software to overwrite arbitrary files on the system. Workarounds Disable Acronis Active Protection service...
Cross-site scripting (XSS) in activities panel
...
Information disclosure was possible due to CORS misconfiguration in local notification service
...
Local privilege escalation due to DLL hijacking vulnerability in multiple components
...
Sensitive information disclosure and manipulation due to missing authorization
...
Security update of Apache Tomcat dependency
...
Security update of cURL dependency
...
Sensitive information disclosure due to missing authorization
...
Sensitive information disclosure and manipulation due to missing authorization
...
Sensitive information manipulation due to cross-site request forgery
...
Sensitive information disclosure due to cleartext storage of sensitive information in memory
...
Sensitive information disclosure and manipulation due to improper authorization
...
Sensitive information leak through log files
...
Local privilege escalation due to insecure driver communication port permissions
...
Denial of service due to unauthenticated API endpoint
...
Sensitive information disclosure due to insecure registry permissions
...
Sensitive information disclosure and manipulation due to improper certification validation
...
Sensitive information disclosure due to insecure folder permissions
...
Local privilege escalation due to excessive permissions assigned to child processes
...
Local privilege escalation due to race condition on application startup
...
Local privilege escalation due to excessive permissions assigned to child processes
...
Local privilege escalation due to unrestricted loading of unsigned libraries
...
Local privilege escalation due to DLL hijacking vulnerability in Acronis Media Builder service
...
Apache Log4j vulnerability
A critical security vulnerability has been identified in Apache Log4j library. The vulnerability has been assigned CVE-2021-44228. Apache Log4j JNDI Java Naming and Directory Interface features used in configuration, log messages, and parameters do not protect against attacker controlled LDAP and...
Sensitive information leak through log files
...