247 matches found
Sensitive information disclosure due to improper authorization
...
Sensitive information leak through log files
...
Local privilege escalation due to insecure folder permissions
...
Security update of zeromq/libzmq dependency
...
Sensitive information disclosure due to insecure folder permissions
...
Local privilege escalation due to insecure driver communication port permissions
...
Local privilege escalation due to unrestricted loading of unsigned libraries
...
Local privilege escalation during installation due to improper soft link handling
...
Sensitive information disclosure due to unauthenticated path traversal
Sensitive information disclosure was possible in Acronis Cloud Manager before build 6.2.23089.203 due to an unauthenticated path traversal vulnerability. This allowed an unauthenticated user on an adjacent network to read local files on the machine where Acronis Cloud Manager was installed...
Excessive attack surface due to binding to an unrestricted IP address
...
Sensitive information leak through log files
...
Remote command execution due to improper input validation
...
Local privilege escalation during recovery due to improper soft link handling
...
Sensitive information disclosure due to improper token expiration validation
...
Sensitive information disclosure due to excessive collection of system information
...
Sensitive information disclosure due to missing authorization
...
Remote command execution due to improper input validation
...
Sensitive information disclosure due to excessive collection of system information
...
MOVEit transfer critical vulnerability
The Progress Community team released a security advisory and fixes for one critical severity security issue affecting all MOVEit Transfer versions. The issue was assigned CVE-2023-34362. Acronis security team concluded that Acronis infrastructure and products are not affected by this vulnerabilit...
Local privilege escalation due to unrestricted loading of unsigned libraries
...
Sensitive information disclosure due to improper authorization
...
Sensitive information disclosure due to CORS misconfiguration
...
Local privilege escalation due to a DLL hijacking vulnerability
...
Denial of service due to unauthenticated API endpoint
...
TLS/SSL weak cipher suites enabled
...
Security update of jwt-go dependency
...
Code execution and sensitive information disclosure due to excessive privileges assigned to Acronis Agent
...
Local privilege escalation due to incomplete uninstallation cleanup
...
Sensitive information disclosure and manipulation due to improper authorization
...
Security update of OpenSSL dependency
...
Sensitive information disclosure due to insecure folder permissions
...
Sensitive information disclosure and manipulation due to improper certification validation
...
Sensitive information disclosure due to insecure registry permissions
...
Sensitive information disclosure due to improper authentication
...
Sensitive information disclosure due to excessive privileges assigned to Acronis Agent
...
Local privilege escalation due to insecure folder permissions
...
Sensitive information disclosure and manipulation due to improper certification validation
...
Local privilege escalation due to insecure driver communication port permissions
...
Local privilege escalation due to improper soft link handling
...
Local privilege escalation due to DLL hijacking vulnerability
...
Local privilege escalation due to insecure folder permissions
...
Sensitive information disclosure due to insecure folder permissions
...
Local privilege escalation due to insecure folder permissions
...
Sensitive information leak through log files
...
High severity vulnerabilities in OpenSSL 3.0
The OpenSSL project team released a security advisory for two high severity security issues affecting OpenSSL versions 3.0.0-3.0.6 and fixed in OpenSSL 3.0.7. The issues were assigned CVE-2022-3602 and CVE-2022-3786. Acronis security team concluded that Acronis infrastructure and products are not...
Security update of Log4net dependency
...
Security update of Swagger dependency
...
Cleartext transmission of sensitive information
...