Airbus Seclab

Local privilege escalation occurs due to improper authentication.

Incorrect default permissions in the software allow for the retrieval of embedded sensitive data.

An issue exists where resources are allocated without limits or throttling, which allows for flooding. Flooding is a condition where a system is overwhelmed by a high volume of requests or data, potentially leading to a denial of service.

An uncontrolled memory allocation issue in Progress Software MOVEit Automation allows for excessive allocation. Uncontrolled memory allocation occurs when a program allocates more memory than is available or necessary, which can lead to system instability or crashes.

An issue exists where resources are allocated without limits or throttling, which allows for excessive allocation.

Improper input validation in Progress Software MOVEit Automation allows for privilege escalation.

An improper authentication flaw allows attackers to bypass authentication entirely. This can lead to unauthorized administrative control, data exposure, privilege escalation, and lateral movement across enterprise networks.

Credentials are not deleted from the Acronis Agent after plan revocation. This can potentially lead to unauthorized access.

Credentials are not deleted from the Acronis Agent after plan revocation. This can potentially lead to unauthorized access or misuse of the stored credentials.

A flaw exists that allows for sensitive data disclosure and manipulation due to missing authorization checks.

The software suffers from a flaw related to improper authentication, which can lead to sensitive data disclosure and manipulation.

The software suffers from a flaw related to improper authentication, which can lead to sensitive data disclosure and manipulation.

The software suffers from a flaw allowing sensitive data disclosure and manipulation because of a lack of authentication.

The issue is related to a denial of service caused by improper handling of malformed input.