PT-2024-13625 · Acronis · Acronis Cyber Protect Cloud Agent

Published 2024-04-29 · Updated 2026-03-06 · CVE-2023-48684

Positive Technologies (AI Summary)

CVSS v3.1

7.1

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions Acronis Cyber Protect Cloud Agent versions before build 37758

Description The issue is related to sensitive information disclosure and manipulation due to missing authorization. This affects Acronis Cyber Protect Cloud Agent on Linux, macOS, and Windows platforms.

Recommendations For Acronis Cyber Protect Cloud Agent versions before build 37758, update to build 37758 or later to resolve the issue. As a temporary workaround, consider restricting access to sensitive information and implementing additional authorization mechanisms until the update is applied.

Fix

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

CVE-2023-48684

Affected Products

Acronis Cyber Protect Cloud Agent

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2023-48684 · Security Note
• https://security-advisory.acronis.com/advisories/SEC-6021 · Vendor Advisory
• https://twitter.com/CVEnew/status/1784980807238512725 · Twitter Post
• https://t.me/cvenotify/78527 · Telegram Post
• https://t.me/cvenotify/78416 · Telegram Post
• https://twitter.com/NUYTSTECH/status/1798817415016677570 · Twitter Post
• https://t.me/cveNotify/154436 · Telegram Post