Sensitive Information Disclosure in Acronis Cyber Protect 15 by Acronis
CVE-2023-44152

6.1MEDIUM

Key Information:

Vendor
Acronis
Status
Acronis Cyber Protect 15
Vendor
CVE Published:
27 September 2023

Summary

A vulnerability exists in Acronis Cyber Protect 15 that allows for sensitive information disclosure and manipulation due to improper authentication. This affects various platforms including Linux, macOS, and Windows, prior to build 35979. If exploited, this vulnerability can expose sensitive user data and put organizations at risk, making timely patching essential.

Affected Version(s)

Acronis Cyber Protect 15 Linux < 35979

References

https://security-advisory.acronis.com/advisories/SEC-1908
vendor-advisory

CVSS V3.1

Score:
6.1
Severity:
MEDIUM
Confidentiality:
High
Integrity:
Low
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.