Mmg

من الممكن حدوث تصعيد للامتيازات المحلية بسبب مشكلة اختطاف مكتبة DLL. يحدث اختطاف مكتبة DLL عندما يقوم أحد التطبيقات بتحميل مكتبة ارتباط ديناميكي (DLL) ضارة بدلاً من المكتبة المقصودة، مما يسمح للمهاجم بتنفيذ تعليمات برمجية بامتيازات مرتفعة.

من الممكن حدوث تصعيد محلي للامتيازات بسبب مشكلة اختطاف ملفات EXE. يحدث هذا عندما يبحث أحد التطبيقات عن ملف قابل للتنفيذ مطلوب بترتيب غير آمن، مما يسمح للمهاجم بوضع ملف قابل للتنفيذ ضار في دليل ذي أولوية أعلى ليتم تنفيذه بامتيازات مرتفعة.

The issue is related to sensitive information disclosure due to insecure folder permissions. This allows sensitive information to be exposed.

A local privilege escalation issue exists due to a DLL hijacking vulnerability. This allows for potential exploitation, leading to elevated privileges on the system. The estimated number of potentially affected devices worldwide is not specified. There is no information provided about real-world incidents where this issue was exploited.

The issue is related to local privilege escalation due to insecure folder permissions.

The issue is related to a local privilege escalation due to a DLL hijacking vulnerability.

Name of the Vulnerable Software and Affected Versions: Acronis Cyber Protect 15 (Windows) versions prior to build 28035 Description: DLL hijacking could lead to local privilege escalation. Recommendations: For Acronis Cyber Protect 15 (Windows) versions prior to build 28035, update to build 28035 or later to resolve the issue. As a temporary workaround, consider restricting access to vulnerable DLLs until a patch is applied.

The issue arises from improper ACL settings of the C:ProgramDataAcronis directory by Acronis True Image 2021. This allows an unprivileged user to execute arbitrary code with SYSTEM privileges by placing a DLL in specific paths within C:ProgramDataAcronis.

The issue concerns an OpenSSL component in Acronis True Image 2021, where the OPENSSLDIR variable is specified as a subdirectory within C:jenkins agent. This component is used by a privileged service within Acronis True Image. An unprivileged Windows user can create subdirectories off the system root, potentially allowing the creation of a specially-crafted openssl.cnf file. This could lead to arbitrary code execution with SYSTEM privileges.

The issue concerns an OpenSSL component in Acronis Cyber Backup and Cyber Protect that specifies an OPENSSLDIR variable as a subdirectory within C:jenkins agent. This component is used by a privileged service in these products. Unprivileged Windows users can create subdirectories off of the system root, allowing a user to create a path to a specially-crafted openssl.cnf file. This can lead to arbitrary code execution with SYSTEM privileges.