PT-2023-5783 · Acronis · Acronis Cyber Protect 15+1
CVE-2023-44159
·
Publicado
2023-09-27
·
Atualizado
2023-09-28
CVSS v2.0
7.8
Alta
| Vetor | AV:N/AC:L/Au:N/C:C/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
Acronis Cyber Protect 15 versions prior to build 35979
Description
The issue is related to the storage of sensitive information in cleartext, which can lead to unauthorized access by a remote attacker. This allows the attacker to obtain sensitive information without proper authorization.
Recommendations
For Acronis Cyber Protect 15 versions prior to build 35979, update to a version that includes the necessary security fixes to prevent cleartext storage of sensitive information. As a temporary workaround, consider restricting access to sensitive data stored by Acronis Cyber Protect 15 until a patch is applied.
Correção
Cleartext Storage of Sensitive Information
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Acronis
Acronis Cyber Protect 15