Description (CNA)
Code execution and sensitive information disclosure due to excessive privileges assigned to Acronis Agent. The following products are affected: Acronis Cyber Protect 15 (Windows, Linux) before build 29486, Acronis Cyber Backup 12.5 (Windows, Linux) before build 16545.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Acronis / Acronis Cyber Protect 15 | affected unspecified before 29486 |
| Acronis / Acronis Cyber Backup 12.5 | affected unspecified before 16545 |
CWE
CWE-269
References
- https://security-advisory.acronis.com/advisories/SEC-4092
- https://herolab.usd.de/security-advisories/usd-2022-0008/
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.