5.5
CVE-2023-41745
- EPSS 0.19%
- Veröffentlicht 31.08.2023 18:15:09
- Zuletzt bearbeitet 21.11.2024 08:21:36
- Erkennungen
LoginSensitive information disclosure due to excessive collection of system information. The following products are affected: Acronis Agent (Linux, macOS, Windows) before build 30991, Acronis Cyber Protect 15 (Linux, macOS, Windows) before build 35979.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Acronis ≫ Cyber Protect Version 15 Update -
Acronis ≫ Cyber Protect Version 15 Update update1
Acronis ≫ Cyber Protect Version 15 Update update2
Acronis ≫ Cyber Protect Version 15 Update update3
Acronis ≫ Cyber Protect Version 15 Update update4
Acronis ≫ Cyber Protect Version 15 Update update5
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.19% | 0.085 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| NIST | 5.5 | 1.8 | 3.6 |
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
|
| security@acronis.com | 6.1 | 1.8 | 4.2 |
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N
|
CWE-200 Exposure of Sensitive Information to an Unauthorized Actor
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.
CWE-668 Exposure of Resource to Wrong Sphere
The product exposes a resource to the wrong control sphere, providing unintended actors with inappropriate access to the resource.
https://security-advisory.acronis.com/advisories/SEC-2008