PT-2023-5790 · Acronis · Acronis Agent

Publicado 2023-10-04 · Atualizado 2026-03-06 · CVE-2023-44210

Positive Technologies (AI Summary)

CVSS v3.1

7.3

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L

Name of the Vulnerable Software and Affected Versions Acronis Agent versions before build 29258

Description The issue is related to sensitive information disclosure and manipulation due to missing authorization. This could allow an attacker to gain unauthorized access to protected information.

Recommendations For Acronis Agent versions before build 29258, update to a version that includes build 29258 or later to resolve the issue. As a temporary workaround, consider restricting access to sensitive information until a patch is applied.

Correção

Missing Authorization

Enumeração de Fraquezas

CWE-862

Identificadores relacionados

BDU:2023-06476

CVE-2023-44210

Produtos afetados

Acronis Agent

Referências · 8

• https://security-advisory.acronis.com/advisories/SEC-2159 · Aviso do Fabricante
• https://security-advisory.acronis.com/SEC-5528 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2023-44210 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2023-44210 · Aviso do Fabricante
• https://t.me/cibsecurity/71643 · Publicação no Telegram
• https://t.me/cvenotify/59099 · Publicação no Telegram
• https://bdu.fstec.ru/vul/2023-06476 · Nota de Segurança
• https://t.me/cveNotify/154433 · Publicação no Telegram