CVE-2020-9452

CVE-2020-9452 affects Acronis True Image 2020 (v24.5.22510). The issue resides in anti_ransomware_service.exe’s quarantine functionality, which can copy a suspected ransomware file between directories with SYSTEM privileges. Unprivileged users have write access in the quarantine folder, enabling ...

CVE-2020-9451

CVE-2020-9451 affects Acronis True Image 2020 (v24.5.22510). The issue arises in anti_ransomware_service.exe, which logs to a folder writable by unprivileged users. Logs are created in a predictable pattern, enabling an unprivileged user to create a hardlink from a not-yet-created log file to ant...

CVE-2020-9450

Affected product: Acronis True Image 2020 (build 24.5.22510). The issue lies in anti_ransomware_service.exe, whose REST API is exposed for GUI communication and is accessible to unprivileged users. This allows adding arbitrary executables to the whitelist or excluding an entire drive from monitor...