Sensitive data disclosure and manipulation due to missing authorization

Sensitive data disclosure and manipulation due to improper authentication

Sensitive data disclosure and manipulation due to improper authentication

Sensitive information disclosure and manipulation due to improper authentication

Sensitive information manipulation due to improper authorization

Sensitive information disclosure and manipulation due to improper authorization

Sensitive information disclosure and manipulation due to improper authentication

Code execution and sensitive information disclosure due to excessive privileges assigned to Acronis Agent

Sensitive information disclosure and manipulation due to improper authorization

Local privilege escalation due to insecure Unix socket permissions

Local privilege escalation due to DLL hijacking vulnerability

Local privilege escalation due to DLL hijacking vulnerability

Local privilege escalation due to insecure folder permissions

Local privilege escalation due to unrestricted loading of unsigned libraries

Local privilege escalation due to insecure driver communication port permissions

Local privilege escalation due to insecure driver communication port permissions

Local privilege escalation due to insecure folder permissions

Local privilege escalation due to incomplete uninstallation cleanup

Local privilege escalation due to excessive permissions assigned to child processes

Local privilege escalation via named pipe due to improper access control checks

DLL hijacking could lead to local privilege escalation

Acronis Cyber Protect 15 for Windows prior to build 27009 allowed local privilege escalation via binary hijacking

Acronis Cyber Protect 15 for Windows prior to build 27009 and Acronis Agent for Windows prior to build 26226 allowed local privilege escalation via DLL hijacking

Acronis Cyber Backup 12.5 and Cyber Protect 15 include an OpenSSL component that specifies an OPENSSLDIR variable as a subdirectory within C:\jenkins_agent\

Denial of service due to insufficient input validation in authentication logging

Cleartext transmission of sensitive information in acep-collector service

Sensitive information disclosure due to cleartext storage of sensitive information

Sensitive information disclosure due to insufficient token field masking

Sensitive information disclosure due to spell-jacking

Sensitive information leak through log files

Sensitive information disclosure due to cleartext storage of sensitive information in memory

Sensitive information disclosure due to excessive collection of system information

Excessive attack surface due to binding to an unrestricted IP address

Sensitive information disclosure due to insecure registry permissions

Sensitive information disclosure and manipulation due to improper certification validation

Sensitive information disclosure and manipulation due to improper certification validation

TLS/SSL weak cipher suites enabled

Sensitive information disclosure and manipulation due to improper authorization

Sensitive information disclosure due to improper authentication

Sensitive information disclosure due to insecure folder permissions

Cleartext transmission of sensitive information

Cleartext transmission of sensitive information

Sensitive information disclosure due to insecure folder permissions

An issue was discovered in Acronis Cyber Protect before 15 Update 1 build 26172

Local privilege escalation due to improper soft link handling

Local privilege escalation due to improper soft link handling

Default credentials set for local privileged user in Virtual Appliance

Sensitive information disclosure and manipulation due to insufficient authorization checks

Sensitive information disclosure due to improper authorization checks

Sensitive information disclosure due to excessive privileges assigned to Acronis Agent