7.5

CVE-2023-44156

Sensitive information disclosure due to spell-jacking. The following products are affected: Acronis Cyber Protect 15 (Linux, Windows) before build 35979.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Acronis ≫ Cyber Protect Version < 15
   Linux ≫ Linux Kernel Version -
   Microsoft ≫ Windows Version -
Acronis ≫ Cyber Protect Version 15 Update -
   Linux ≫ Linux Kernel Version -
   Microsoft ≫ Windows Version -
Acronis ≫ Cyber Protect Version 15 Update update1
   Linux ≫ Linux Kernel Version -
   Microsoft ≫ Windows Version -
Acronis ≫ Cyber Protect Version 15 Update update2
   Linux ≫ Linux Kernel Version -
   Microsoft ≫ Windows Version -
Acronis ≫ Cyber Protect Version 15 Update update3
   Linux ≫ Linux Kernel Version -
   Microsoft ≫ Windows Version -
Acronis ≫ Cyber Protect Version 15 Update update4
   Linux ≫ Linux Kernel Version -
   Microsoft ≫ Windows Version -
Acronis ≫ Cyber Protect Version 15 Update update5
   Linux ≫ Linux Kernel Version -
   Microsoft ≫ Windows Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.86% 0.537
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
security@acronis.com 5.7 2.1 3.6
CVSS:3.0/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
CWE-359 Exposure of Private Personal Information to an Unauthorized Actor

The product does not properly prevent a person's private, personal information from being accessed by actors who either (1) are not explicitly authorized to access the information or (2) do not have the implicit consent of the person about whom the information is collected.

https://security-advisory.acronis.com/advisories/SEC-5124
Vendor Advisory