Sensitive Information Disclosure in Acronis Agent by Acronis

CVE-2023-44212

What is CVE-2023-44212?

Acronis Agent versions prior to build 31477 are susceptible to a vulnerability that allows unauthorized users to access and manipulate sensitive information due to inadequate authorization measures. This flaw could lead to significant privacy breaches, as unauthorized users might exploit this weakness to obtain confidential data, making it essential for users to update to the latest version of the product. For detailed information and mitigation steps, refer to the Acronis advisory at SEC-5528.

References