Privilege Escalation Vulnerability in Acronis True Image by Acronis
CVE-2020-9452

7.8HIGH

Key Information:

Vendor

Acronis
Status
True Image 2020
Vendor
CVE Published:
25 May 2021

What is CVE-2020-9452?

Acronis True Image 2020 contains a vulnerability that allows unprivileged users to use hardlinks to overwrite arbitrary files in system directories via the anti_ransomware_service.exe component. This issue arises from improper permissions in the quarantine folder, enabling potential unauthorized access to SYSTEM-level privileges. Although the quarantine feature is disabled by default, it can be forced through interactions with the service's REST API, raising significant security concerns for data integrity.

References

https://www.acronis.com
x_refsource_MISC
https://danishcyberdefence.dk/blog
x_refsource_MISC
https://madsjoensen.dk/cve-2020-9452/
x_refsource_MISC

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.