PT-2023-5771 · Acronis · Acronis Agent

Published 2023-08-31 · Updated 2023-09-06 · CVE-2023-41750

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Acronis Agent versions prior to build 32047

Description The issue is related to sensitive information disclosure due to missing authorization. This may allow an attacker to gain unauthorized access to protected information.

Recommendations For Acronis Agent versions prior to build 32047, update to a version after build 32047 to resolve the issue.

Fix

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

BDU:2023-06457

CVE-2023-41750

Affected Products

Acronis Agent

References · 5

• https://security-advisory.acronis.com/advisories/SEC-5382 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-41750 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-41750 · Security Note
• https://bdu.fstec.ru/vul/2023-06457 · Security Note
• https://t.me/cibsecurity/69602 · Telegram Post