PT-2023-5785 · Acronis · Acronis Cyber Protect 15+1

CVE-2023-44154 · Publicado 2023-09-27 · Atualizado 2023-10-26

Positive Technologies (AI Summary)

CVSS v2.0

9.4

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:N

Name of the Vulnerable Software and Affected Versions Acronis Cyber Protect 15 versions before build 35979

Description The issue is related to sensitive information disclosure and manipulation due to improper authorization, potentially allowing a remote attacker to elevate their privileges.

Recommendations For Acronis Cyber Protect 15 versions before build 35979, update to a version that includes the necessary security fixes to address the improper authorization issue.

Correção

Incorrect Authorization

IDOR

Enumeração de Fraquezas

CWE-863

CWE-639

Identificadores relacionados

BDU:2023-06471

CVE-2023-44154

Produtos afetados

Acronis

Acronis Cyber Protect 15

Referências · 8

• https://security-advisory.acronis.com/advisories/SEC-2436 · Aviso do Fabricante
• https://twitter.com/CVEnew/status/1707009500622750191 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2023-44154 · Nota de Segurança
• https://t.me/cvenotify/60040 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2023-44154 · Aviso do Fabricante
• https://t.me/cvenotify/58680 · Publicação no Telegram
• https://bdu.fstec.ru/vul/2023-06471 · Nota de Segurança
• https://twitter.com/VulmonFeeds/status/1707085986746839298 · Publicação no Twitter