Summary
Ein Angreifer kann mehrere Schwachstellen in Acronis Cyber Protect ausnutzen, um Daten zu manipulieren, vertrauliche Informationen offenzulegen oder seine Berechtigungen zu erweitern.
Product
Acronis Cyber Protect ist eine umfassende Cybersecurity- und Datenschutzlösung, die Funktionen wie Virenschutz, Backup und Wiederherstellung, Schutz vor Ransomware und sicheres Online-Browsing in einem einzigen Paket bietet.
Vulnerabilities 13
-
High 7.1
Sensitive information disclosure and manipulation due to improper authorization. The following products are affected: A…
-
Medium 6.7
Stored cross-site scripting (XSS) vulnerability in protection plan name. The following products are affected: Acronis C…
-
Medium 6.1
Sensitive information disclosure and manipulation due to improper authentication. The following products are affected: …
-
Medium 5.7
Sensitive information disclosure due to spell-jacking. The following products are affected: Acronis Cyber Protect 15 (L…
-
Medium 5.5
Sensitive information disclosure due to cleartext storage of sensitive information. The following products are affected…
-
Medium 4.6
Sensitive information disclosure and manipulation due to improper authorization. The following products are affected: A…
-
Medium 4.4
Sensitive information leak through log files. The following products are affected: Acronis Cyber Protect 15 (Linux, Win…
-
Low 3.5
Sensitive information disclosure due to insufficient token field masking. The following products are affected: Acronis …
-
Low 3.5
Sensitive information disclosure due to improper authorization. The following products are affected: Acronis Cyber Prot…
-
Low 3.3
Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis Cyber Prote…
-
Low 3.1
Sensitive information manipulation due to cross-site request forgery. The following products are affected: Acronis Cybe…
-
Low 3.1
Sensitive information manipulation due to cross-site request forgery. The following products are affected: Acronis Cybe…
-
Low 2.2
Sensitive information disclosure due to cleartext storage of sensitive information in memory. The following products ar…
Revision history
-
#1
Initiale Fassung
References
-
Acronis Security Advisory vom 2023-09-27
https://security-advisory.acronis.com/updates
-
Acronis Security Advisory SEC-5914 vom 2023-09-27
https://security-advisory.acronis.com/SEC-5914
-
Acronis Security Advisory SEC-5839 vom 2023-09-27
https://security-advisory.acronis.com/SEC-5839
-
Acronis Security Advisory SEC-5787 vom 2023-09-27
https://security-advisory.acronis.com/SEC-5787
-
Acronis Security Advisory SEC-5393 vom 2023-09-27
https://security-advisory.acronis.com/SEC-5393
-
Acronis Security Advisory SEC-5124 vom 2023-09-27
https://security-advisory.acronis.com/SEC-5124
-
Acronis Security Advisory SEC-4321 vom 2023-09-27
https://security-advisory.acronis.com/SEC-4321
-
Acronis Security Advisory SEC-4084 vom 2023-09-27
https://security-advisory.acronis.com/SEC-4084
-
Acronis Security Advisory SEC-4083 vom 2023-09-27
https://security-advisory.acronis.com/SEC-4083
-
Acronis Security Advisory SEC-4071 vom 2023-09-27
https://security-advisory.acronis.com/SEC-4071
-
Acronis Security Advisory SEC-3956 vom 2023-09-27
https://security-advisory.acronis.com/SEC-3956
-
Acronis Security Advisory SEC-3471 vom 2023-09-27
https://security-advisory.acronis.com/SEC-3471
-
Acronis Security Advisory SEC-2985 vom 2023-09-27
https://security-advisory.acronis.com/SEC-2985
-
Acronis Security Advisory SEC-2438 vom 2023-09-27
https://security-advisory.acronis.com/SEC-2438
-
Acronis Security Advisory SEC-2436 vom 2023-09-27
https://security-advisory.acronis.com/SEC-2436
-
Acronis Security Advisory SEC-1994 vom 2023-09-27
https://security-advisory.acronis.com/SEC-1994
-
Acronis Security Advisory SEC-1908 vom 2023-09-27
https://security-advisory.acronis.com/SEC-1908