PT-2023-5793 · Acronis · Acronis Agent

Publicado 2023-10-05 · Atualizado 2026-03-06 · CVE-2023-45242

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Média

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Acronis Agent versions prior to build 35739

Description The issue is related to errors in authorization, which may allow an attacker to gain unauthorized access to protected information. This is due to missing authorization, leading to sensitive information disclosure.

Recommendations For versions prior to build 35739, update to a version that includes the necessary security fixes to address the authorization errors. As a temporary workaround, consider restricting access to sensitive information until a patch is available.

Correção

Missing Authorization

Enumeração de Fraquezas

CWE-862

Identificadores relacionados

BDU:2023-06479

CVE-2023-45242

Produtos afetados

Acronis Agent

Referências · 8

• https://t.me/cveNotify/154434 · Publicação no Telegram
• https://twitter.com/VulmonFeeds/status/1710091901448097950 · Publicação no Twitter
• https://osv.dev/vulnerability/CVE-2023-45242 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2023-45242 · Nota de Segurança
• https://t.me/cvenotify/59173 · Publicação no Telegram
• https://security-advisory.acronis.com/advisories/SEC-6018 · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2023-06479 · Nota de Segurança
• https://twitter.com/CVEnew/status/1710055892907888688 · Publicação no Twitter