Sensitive Information Disclosure in Acronis Cyber Protect 15 by Acronis
CVE-2023-44153

2.2LOW

Key Information:

Vendor
Acronis
Status
Acronis Cyber Protect 15
Vendor
CVE Published:
27 September 2023

Summary

Acronis Cyber Protect 15 has a vulnerability that enables attackers to access sensitive information due to the cleartext storage of data in memory. This affects versions prior to build 35979 across Linux, macOS, and Windows platforms. Organizations using affected versions are at risk of data leaks, which could lead to serious privacy concerns and operational disruptions.

Affected Version(s)

Acronis Cyber Protect 15 Linux < 35979

References

https://security-advisory.acronis.com/advisories/SEC-1994
vendor-advisory

CVSS V3.1

Score:
2.2
Severity:
LOW
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.