PT-2023-5670 · Acronis · Acronis Cyber Protect 15+1
CVE-2023-44155
·
Publicado
2023-09-27
·
Atualizado
2023-09-28
CVSS v3.1
7.5
Alta
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
Acronis Cyber Protect 15 versions before build 35979
Description
The issue is related to a sensitive information leak through log files. This could allow an attacker to gain unauthorized access to protected information.
Recommendations
For Acronis Cyber Protect 15 versions before build 35979, update to build 35979 or later to resolve the issue. As a temporary workaround, consider restricting access to log files to minimize the risk of exploitation.
Correção
Insertion into Log File
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Acronis
Acronis Cyber Protect 15