Summary
Ein Angreifer kann mehrere Schwachstellen in Acronis Cyber Protect ausnutzen, um seine Privilegien zu erhöhen, um Sicherheitsmechanismen zu umgehen und um einen Cross-Site Scripting Angriff durchzuführen.
Product
Acronis Cyber Protect ist eine umfassende Cybersecurity- und Datenschutzlösung, die Funktionen wie Virenschutz, Backup und Wiederherstellung, Schutz vor Ransomware und sicheres Online-Browsing in einem einzigen Paket bietet.
Vulnerabilities 6
-
High 7.3
Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Prote…
-
Medium 6.6
Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Prote…
-
Medium 6.1
Missing session invalidation after user deletion. The following products are affected: Acronis Cyber Protect 16 (Window…
-
Medium 5.5
Web installer integrity check used weak hash algorithm. The following products are affected: Acronis Cyber Protect 16 (…
-
Medium 4.4
Local privilege escalation due to excessive permissions assigned to Tray Monitor service. The following products are af…
-
Low 3.1
Stored cross-site scripting (XSS) vulnerability due to missing origin validation in postMessage. The following products…
Revision history
-
#1
Initiale Fassung
References
-
Acronis Security Advisory SEC-3647 vom 2025-01-02
https://security-advisory.acronis.com/SEC-3647
-
Acronis Security Advisory SEC-2245 vom 2025-01-02
https://security-advisory.acronis.com/SEC-2245
-
Acronis Security Advisory SEC-5342 vom 2025-01-02
https://security-advisory.acronis.com/SEC-5342
-
Acronis Security Advisory SEC-6418 vom 2025-01-02
https://security-advisory.acronis.com/SEC-6418
-
Acronis Security Advisory SEC-7612 vom 2025-01-02
https://security-advisory.acronis.com/SEC-7612
-
Acronis Security Advisory SEC-1911 vom 2025-01-02
https://security-advisory.acronis.com/SEC-1911