251 matches found
Security update of Swagger dependency
...
Cleartext transmission of sensitive information
...
Cleartext transmission of sensitive information
...
Sensitive information disclosure due to insecure folder permissions
...
Open redirect via user-controlled query parameter
...
Security update of Elasticsearch dependency
...
HTML injection via report name
...
Local privilege escalation due to excessive permissions assigned to child processes
...
Local privilege escalation due to a DLL hijacking vulnerability
...
Local privilege escalation due to insecure folder permissions
...
Local privilege escalation due to insecure folder permissions
...
Local privilege escalation due to unrestricted loading of unsigned libraries
...
Local privilege escalation due to DLL hijacking vulnerability
...
Local privilege escalation due to race condition on application startup
...
Local privilege escalation due to excessive permissions assigned to child processes
...
Local privilege escalation via named pipe due to improper access control checks
...
Local privilege escalation due to DLL hijacking vulnerability in Acronis Media Builder service
...
Apache Log4j vulnerability
A critical security vulnerability has been identified in Apache Log4j library. The vulnerability has been assigned CVE-2021-44228. Apache Log4j JNDI Java Naming and Directory Interface features used in configuration, log messages, and parameters do not protect against attacker controlled LDAP and...
Stored cross-site scripting (XSS) was possible in protection plan details
...
Security update of Vue.js dependency
...
DLL hijacking could lead to local privilege escalation
...
Security update of sqlite3 dependency
...
Sensitive information leak through log files
...
Stored cross-site scripting (XSS) was possible in activity details
...
Cross-site scripting (XSS) was possible in notification pop-ups
...
Self cross-site scripting (XSS) was possible on devices page
...
DLL hijacking could lead to denial of service
...
Reflected Cross-site scripting (XSS) on login page
...
Local privilege escalation due to a binary hijacking vulnerability
...
Local privilege escalation due to a DLL hijacking vulnerability
...
Local privilege escalation due to insecure folder permissions
...
A logic bug in system monitoring driver allows to bypass Windows memory protection and access sensitive data
...
Local privilege escalation due to insecure XPC service configuration
...
Local privilege escalation due to insecure folder permissions
...
Local privilege escalation due to insecure XPC service configuration
...
Denial of service due to insecure folder permissions
...
Local privilege escalation due to improper soft link handling
The issue could allow local users or malicious software to overwrite arbitrary files on the system. Workarounds Disable Acronis Active Protection service...
Antiransomware microservice did not authenticate inter-service communication
...
Missing SSL certificate validation
...
Local privilege escalation due to improper soft link handling
...
Unauthenticated attacker having local code execution may tamper with microservice API
...
Local privilege escalation due to a DLL hijacking vulnerability
...
Local privilege escalation due to insecure folder permissions
...
Local privilege escalation due to improper soft link handling
...
Cross-site scripting (XSS) in activities panel
...
Information disclosure was possible due to CORS misconfiguration in local notification service
...
Local privilege escalation due to DLL hijacking vulnerability in multiple components
...
Acronis True Image is vulnerable to privilege escalation via openssl.cnf file
...