PT-2023-5789 · Acronis · Acronis Cyber Protect 15+1

CVE-2023-44152

·

Publicado

2023-09-27

·

Atualizado

2024-09-10

CVSS v3.1

10

Crítica

VetorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Name of the Vulnerable Software and Affected Versions Acronis Cyber Protect 15 versions prior to build 35979
Description The issue is related to the lack of an authentication procedure, which can be exploited by a remote attacker to elevate their privileges. This can lead to the disclosure and manipulation of sensitive information.
Recommendations For Acronis Cyber Protect 15 versions prior to build 35979, update to a version that includes build 35979 or later to resolve the issue. As a temporary workaround, consider restricting access to sensitive information and implementing additional authentication measures until a patch is applied.

Correção

Missing Authentication

Improper Authentication

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

BDU:2023-06475
CVE-2023-44152

Produtos afetados

Acronis
Acronis Cyber Protect 15