PT-2023-5806
CVE-2023-44208
·
Published
2023-10-04
·
Updated
2023-10-07
Description by
CVSS 2.0
10
CriticalMetricsAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
Acronis Cyber Protect Home Office (Windows) before build 40713
Description
The issue is related to sensitive information disclosure and manipulation due to missing authorization, potentially allowing a remote attacker to elevate their privileges.
Recommendations
For Acronis Cyber Protect Home Office (Windows) before build 40713, update to a version after build 40713 to resolve the issue. As a temporary workaround, consider restricting access to sensitive information and implementing additional authorization checks until a patch is available.
Found an issue in the description? Have something to add? Feel free to write us 👾