PT-2020-11951 · Openssl+1 · Openssl+1

Adr + 4 · Published 2020-10-21 · Updated 2021-12-20 · CVE-2020-10139

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Acronis True Image version 2021

Description The issue concerns an OpenSSL component in Acronis True Image 2021, where the OPENSSLDIR variable is specified as a subdirectory within C:jenkins agent. This component is used by a privileged service within Acronis True Image. An unprivileged Windows user can create subdirectories off the system root, potentially allowing the creation of a specially-crafted openssl.cnf file. This could lead to arbitrary code execution with SYSTEM privileges.

Recommendations For Acronis True Image version 2021, consider restricting access to the system root to prevent unprivileged users from creating subdirectories that could be used to exploit this issue. As a temporary workaround, restrict the use of the OpenSSL component until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Access Control

Improper Initialization

Weakness Enumeration

CWE-284

CWE-665

Related Identifiers

CVE-2020-10139

Affected Products

Acronis True Image

Openssl

References · 3

• https://osv.dev/vulnerability/CVE-2020-10139 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-10139 · Security Note
• https://kb.cert.org/vuls/id/114757 · Note