PT-2023-5801 · Acronis · Acronis Cyber Protect 16+2
CVE-2023-45247
·
Publicado
2023-10-09
·
Atualizado
2025-01-02
CVSS v3.1
7.1
Alta
| Vetor | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N |
Name of the Vulnerable Software and Affected Versions
Acronis Cyber Protect Cloud Agent versions before build 36497
Acronis Cyber Protect 16 versions before build 39169
Acronis Agent versions before build 36497
Description
The issue is related to sensitive information disclosure and manipulation due to missing authorization. This could allow an attacker to elevate their privileges.
Recommendations
For Acronis Cyber Protect Cloud Agent versions before build 36497, update to build 36497 or later.
For Acronis Cyber Protect 16 versions before build 39169, update to build 39169 or later.
For Acronis Agent versions before build 36497, update to build 36497 or later.
Correção
Missing Authorization
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Acronis Agent
Acronis Cyber Protect 16
Acronis Cyber Protect Cloud Agent