PT-2022-13207 · Acronis · Acronis Vss Doctor

Published 2022-02-11 · Updated 2022-02-22 · CVE-2022-0483

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Acronis VSS Doctor (Windows) versions prior to build 53

Description The issue is related to local privilege escalation due to insecure folder permissions.

Recommendations For versions prior to build 53, update to build 53 or later to resolve the issue.

Fix

Incorrect Permission

Uncontrolled Search Path Element

Weakness Enumeration

CWE-732

CWE-427

Related Identifiers

CVE-2022-0483

Affected Products

Acronis Vss Doctor

References · 2

• https://security-advisory.acronis.com/advisories/SEC-3354 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-0483 · Security Note