Medium WID-SEC-2024-0493 5 CVEs

Acronis Cyber Protect: Mehrere Schwachstellen

Published Feb 27, 2024 · Updated Feb 27, 2024 · de-DE

Vendor: Acronis Product: Cyber Protect Platform: Linux Platform: Windows

Summary

Ein lokaler Angreifer kann mehrere Schwachstellen in Acronis Cyber Protect ausnutzen, um Informationen offenzulegen, einen Cross-Site-Scripting-Angriff durchzuführen oder unbekannte Auswirkungen zu verursachen.

Product

Acronis Cyber Protect ist eine umfassende Cybersecurity- und Datenschutzlösung, die Funktionen wie Virenschutz, Backup und Wiederherstellung, Schutz vor Ransomware und sicheres Online-Browsing in einem einzigen Paket bietet.

Vulnerabilities 5

Medium 6.1

CVE-2023-48682

Stored cross-site scripting (XSS) vulnerability in unit name. The following products are affected: Acronis Cyber Protec…

Acronis Acronis Cyber Protect 16

Feb 27, 2024
Medium 5.5

CVE-2023-48678

Sensitive information disclosure due to insecure folder permissions. The following products are affected: Acronis Cyber…

Acronis Acronis Cyber Protect 16

Feb 27, 2024
Low 3.3

CVE-2023-48680

Sensitive information disclosure due to excessive collection of system information. The following products are affected…

Acronis Acronis Cyber Protect 16

Feb 27, 2024
Low 3.1

CVE-2023-48679

Stored cross-site scripting (XSS) vulnerability due to missing origin validation in postMessage. The following products…

Acronis Acronis Cyber Protect 16

Feb 27, 2024
Low 1.9

CVE-2023-48681

Self cross-site scripting (XSS) vulnerability in storage nodes search field. The following products are affected: Acron…

Acronis Acronis Cyber Protect 16

Feb 27, 2024

Revision history

2024-02-27 #1
Initiale Fassung

References

Acronis Advisory Database vom 2024-02-27
https://security-advisory.acronis.com/
Acronis Advisory Database vom 2024-02-27
https://security-advisory.acronis.com/SEC-3469
GitHub Advisory Database vom 2024-02-27
https://github.com/advisories/GHSA-qqr3-c8vc-pm7v
Acronis Advisory Database vom 2024-02-27
https://security-advisory.acronis.com/SEC-5392
Acronis Advisory Database vom 2024-02-27
https://security-advisory.acronis.com/SEC-2319
GitHub Advisory Database vom 2024-02-27
https://github.com/advisories/GHSA-7vh3-6443-474p
GitHub Advisory Database vom 2024-02-27
https://github.com/advisories/GHSA-76cj-82j9-gjxf
Acronis Advisory Database vom 2024-02-27
https://security-advisory.acronis.com/SEC-5901
GitHub Advisory Database vom 2024-02-27
https://github.com/advisories/GHSA-whg2-vcp6-g5hp
Acronis Advisory Database vom 2024-02-27
https://security-advisory.acronis.com/SEC-5285