251 matches found
Sensitive information disclosure and manipulation due to improper authorization
...
Stored cross-site scripting (XSS) vulnerability in protection plan name
...
Sensitive information disclosure due to spell-jacking
...
Sensitive information disclosure and manipulation due to improper authorization
...
Sensitive information leak through log files
...
Sensitive information disclosure due to insufficient token field masking
...
Local privilege escalation due to insecure folder permissions
...
Sensitive information manipulation due to cross-site request forgery
...
Sensitive information disclosure due to insecure folder permissions
...
Local privilege escalation due to insecure driver communication port permissions
...
Local privilege escalation due to unrestricted loading of unsigned libraries
...
Local privilege escalation during recovery due to improper soft link handling
...
Sensitive information disclosure due to unauthenticated path traversal
Sensitive information disclosure was possible in Acronis Cloud Manager before build 6.2.23089.203 due to an unauthenticated path traversal vulnerability. This allowed an unauthenticated user on an adjacent network to read local files on the machine where Acronis Cloud Manager was installed...
Sensitive information disclosure due to excessive collection of system information
...
Sensitive information leak through log files
...
Excessive attack surface due to binding to an unrestricted IP address
...
Sensitive information disclosure due to missing authorization
...
Remote command execution due to improper input validation
...
Remote command execution due to improper input validation
...
Sensitive information disclosure due to improper token expiration validation
...
Sensitive information disclosure due to excessive collection of system information
...
Local privilege escalation during installation due to improper soft link handling
...
MOVEit transfer critical vulnerability
The Progress Community team released a security advisory and fixes for one critical severity security issue affecting all MOVEit Transfer versions. The issue was assigned CVE-2023-34362. Acronis security team concluded that Acronis infrastructure and products are not affected by this vulnerabilit...
Local privilege escalation due to unrestricted loading of unsigned libraries
...
Sensitive information disclosure due to improper authorization
...
Sensitive information disclosure due to CORS misconfiguration
...
Local privilege escalation due to a DLL hijacking vulnerability
...
Denial of service due to unauthenticated API endpoint
...
Code execution and sensitive information disclosure due to excessive privileges assigned to Acronis Agent
...
Sensitive information disclosure due to improper authentication
...
Local privilege escalation due to insecure driver communication port permissions
...
Sensitive information disclosure due to excessive privileges assigned to Acronis Agent
...
Sensitive information disclosure and manipulation due to improper certification validation
...
Sensitive information disclosure due to insecure registry permissions
...
Sensitive information disclosure and manipulation due to improper certification validation
...
Security update of OpenSSL dependency
...
Local privilege escalation due to insecure folder permissions
...
Local privilege escalation due to incomplete uninstallation cleanup
...
TLS/SSL weak cipher suites enabled
...
Security update of jwt-go dependency
...
Sensitive information disclosure due to insecure folder permissions
...
Sensitive information disclosure and manipulation due to improper authorization
...
Local privilege escalation due to insecure folder permissions
...
Sensitive information leak through log files
...
Local privilege escalation due to improper soft link handling
...
Local privilege escalation due to DLL hijacking vulnerability
...
Local privilege escalation due to insecure folder permissions
...
Sensitive information disclosure due to insecure folder permissions
...
High severity vulnerabilities in OpenSSL 3.0
The OpenSSL project team released a security advisory for two high severity security issues affecting OpenSSL versions 3.0.0-3.0.6 and fixed in OpenSSL 3.0.7. The issues were assigned CVE-2022-3602 and CVE-2022-3786. Acronis security team concluded that Acronis infrastructure and products are not...