PT-2022-20442 · Acronis · Acronis Cyber Protect 15+1

Published 2022-05-18 · Updated 2022-06-01 · CVE-2022-30994

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Acronis Cyber Protect 15 (Windows) before build 29240

Description The issue involves the cleartext transmission of sensitive information.

Recommendations For Acronis Cyber Protect 15 (Windows) before build 29240, update to build 29240 or later to resolve the issue.

Fix

Cleartext Transmission of Sensitive Information

Weakness Enumeration

CWE-319

Related Identifiers

CVE-2022-30994

Affected Products

Acronis

Acronis Cyber Protect 15

References · 6

• https://security-advisory.acronis.com/advisories/SEC-2388 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-30994 · Security Note
• https://osv.dev/vulnerability/CVE-2022-30994 · Vendor Advisory
• https://t.me/cvenotify/30413 · Telegram Post
• https://t.me/cibsecurity/42964 · Telegram Post
• https://t.me/cvenotify/30403 · Telegram Post