PT-2022-27520 · Acronis · Acronis Agent+2

Tkoyeung · Published 2022-11-17 · Updated 2023-02-23 · CVE-2022-45454

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Acronis Agent (Windows) versions before build 30161 Acronis Cyber Protect 15 (Windows) versions before build 30984

Description The issue is related to sensitive information disclosure due to insecure folder permissions.

Recommendations For Acronis Agent (Windows) versions before build 30161, update to build 30161 or later. For Acronis Cyber Protect 15 (Windows) versions before build 30984, update to build 30984 or later.

Fix

Incorrect Default Permissions

Information Disclosure

Weakness Enumeration

CWE-276

CWE-200

Related Identifiers

CVE-2022-45454

Affected Products

Acronis

Acronis Agent

Acronis Cyber Protect 15

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2022-45454 · Security Note
• https://security-advisory.acronis.com/advisories/SEC-4379 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-45454 · Vendor Advisory
• https://t.me/cvenotify/44219 · Telegram Post