PT-2023-5787 · Acronis · Acronis Cyber Protect 16+2

CVE-2023-44213

·

Publicado

2023-10-05

·

Atualizado

2024-09-10

CVSS v3.1

5.5

Média

VetorAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions Acronis Cyber Protect Cloud Agent (Windows) versions before build 35739 Acronis Cyber Protect 16 (Windows) versions before build 37391 Acronis Agent (Windows) versions before build 35739
Description The issue is related to sensitive information disclosure due to excessive collection of system information. This may allow an attacker to gain unauthorized access to protected information.
Recommendations For Acronis Cyber Protect Cloud Agent (Windows) versions before build 35739, update to build 35739 or later. For Acronis Cyber Protect 16 (Windows) versions before build 37391, update to build 37391 or later. For Acronis Agent (Windows) versions before build 35739, update to build 35739 or later.

Correção

Information Disclosure

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-200CWE-359

Identificadores relacionados

BDU:2023-06473
CVE-2023-44213

Produtos afetados

Acronis Agent
Acronis Cyber Protect 16
Acronis Cyber Protect Cloud Agent