PT-2023-5777 · Acronis · Acronis Cyber Protect 15+1

Publicado 2023-09-27 · Atualizado 2023-09-28 · CVE-2023-44205

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Média

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Acronis Cyber Protect 15 versions before build 35979

Description The issue is related to sensitive information disclosure due to improper authorization. It is caused by an error in processing user-controlled authorization keys, which can allow a remote attacker to gain unauthorized access to protected information.

Recommendations For Acronis Cyber Protect 15 versions before build 35979, update to a version after build 35979 to resolve the issue. As a temporary workaround, consider restricting access to sensitive information until the update is applied.

Correção

IDOR

Enumeração de Fraquezas

CWE-639

Identificadores relacionados

BDU:2023-06463

CVE-2023-44205

Produtos afetados

Acronis

Acronis Cyber Protect 15

Referências · 5

• https://security-advisory.acronis.com/advisories/SEC-4321 · Aviso do Fabricante
• https://twitter.com/CVEnew/status/1707009493689635017 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2023-44205 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2023-44205 · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2023-06463 · Nota de Segurança