Mattéo Ricordeau

**Name of the Vulnerable Software and Affected Versions** Acronis Cyber Protect Cloud Agent (Linux, macOS, Windows) versions prior to build 40497 Acronis Cyber Protect 17 (Linux, macOS, Windows) versions prior to build 41186 **Description** Credentials are not deleted from the Acronis Agent after plan revocation. This can potentially lead to unauthorized access. **Recommendations** Update Acronis Cyber Protect Cloud Agent to build 40497 or later. Update Acronis Cyber Protect 17 to build 41186 or later.

**Name of the Vulnerable Software and Affected Versions** Acronis Cyber Protect Cloud Agent (Linux, macOS, Windows) versions prior to build 41124 **Description** Credentials are not deleted from the Acronis Agent after plan revocation. This can potentially lead to unauthorized access or misuse of the stored credentials. **Recommendations** Update Acronis Cyber Protect Cloud Agent to build 41124 or later.

**Name of the Vulnerable Software and Affected Versions** Acronis Cyber Protect 15 versions prior to build 41800 Acronis Cyber Protect 16 versions prior to build 39938 **Description** The software suffers from a flaw related to improper authentication, which can lead to sensitive data disclosure and manipulation. **Recommendations** Update Acronis Cyber Protect 15 to build 41800 or later. Update Acronis Cyber Protect 16 to build 39938 or later.

**Name of the Vulnerable Software and Affected Versions** Acronis Cyber Protect 15 versions prior to build 41800 Acronis Cyber Protect 16 versions prior to build 39938 **Description** A flaw exists that allows for sensitive data disclosure and manipulation due to missing authorization checks. **Recommendations** Update Acronis Cyber Protect 15 to build 41800 or later. Update Acronis Cyber Protect 16 to build 39938 or later.

**Name of the Vulnerable Software and Affected Versions** Acronis Cyber Protect 15 versions prior to build 41800 Acronis Cyber Protect 16 versions prior to build 39938 **Description** The software suffers from a flaw related to improper authentication, which can lead to sensitive data disclosure and manipulation. **Recommendations** Update Acronis Cyber Protect 15 to build 41800 or later. Update Acronis Cyber Protect 16 to build 39938 or later.

**Name of the Vulnerable Software and Affected Versions** Acronis Cyber Protect Cloud Agent versions prior to build 39870 Acronis Cyber Protect 16 versions prior to build 39938 Acronis Cyber Protect 15 versions prior to build 41800 **Description** The software suffers from a flaw allowing sensitive data disclosure and manipulation because of a lack of authentication. **Recommendations** Update Acronis Cyber Protect Cloud Agent to build 39870 or later. Update Acronis Cyber Protect 16 to build 39938 or later. Update Acronis Cyber Protect 15 to build 41800 or later.

**Name of the Vulnerable Software and Affected Versions** Acronis Cyber Protect Cloud Agent (Linux, macOS, Windows) versions before build 40077 **Description** The issue is related to a denial of service caused by improper handling of malformed input. **Recommendations** For Acronis Cyber Protect Cloud Agent versions before build 40077, update to build 40077 or later to resolve the issue.