CVE-2023-45246

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2023-45246
Sensitive information disclosure and manipulation due to missing authorization. The following products are affected: Acronis Cyber Protect Cloud Agent (Linux, macOS, Windows) before build 36343, Acronis Cyber Protect 16 (Linux, macOS, Windows) before build 39169.

7.1 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 5.2

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact NONE

Scope UNCHANGED

References
Link Resource
https://security-advisory.acronis.com/advisories/SEC-5903 Vendor Advisory
https://security-advisory.acronis.com/advisories/SEC-5903 Vendor Advisory
Configurations

Configuration 1 (hide)

AND
cpe:2.3:a:acronis:agent:*:*:*:*:*:*:*:*
OR cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*
History

02 Jan 2025, 16:15

Type Values Removed Values Added
Summary (en) Sensitive information disclosure and manipulation due to missing authorization. The following products are affected: Acronis Cyber Protect Cloud Agent (Linux, macOS, Windows) before build 36343. (en) Sensitive information disclosure and manipulation due to missing authorization. The following products are affected: Acronis Cyber Protect Cloud Agent (Linux, macOS, Windows) before build 36343, Acronis Cyber Protect 16 (Linux, macOS, Windows) before build 39169.

21 Nov 2024, 08:26

Type Values Removed Values Added
References () https://security-advisory.acronis.com/advisories/SEC-5903 - Vendor Advisory () https://security-advisory.acronis.com/advisories/SEC-5903 - Vendor Advisory

23 Sep 2024, 19:54

Type Values Removed Values Added
CWE CWE-287

10 Sep 2024, 16:15

Type Values Removed Values Added
CWE CWE-862
Summary (en) Sensitive information disclosure and manipulation due to improper authentication. The following products are affected: Acronis Agent (Linux, macOS, Windows) before build 36343. (en) Sensitive information disclosure and manipulation due to missing authorization. The following products are affected: Acronis Cyber Protect Cloud Agent (Linux, macOS, Windows) before build 36343.

11 Oct 2023, 17:20

Type Values Removed Values Added
CWE CWE-287
First Time Acronis
Apple macos
Apple
Acronis agent
Microsoft
Microsoft windows
Linux
Linux linux Kernel
References (MISC) https://security-advisory.acronis.com/advisories/SEC-5903 - (MISC) https://security-advisory.acronis.com/advisories/SEC-5903 - Vendor Advisory
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 7.1
CPE cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*
cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*
cpe:2.3:a:acronis:agent:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*

06 Oct 2023, 11:15

Type Values Removed Values Added
New CVE
Information

Published : 2023-10-06 11:15

Updated : 2025-01-02 16:15

NVD link : CVE-2023-45246

Mitre link : CVE-2023-45246

CVE.ORG link : CVE-2023-45246

JSON object : View

Products Affected

acronis

  • agent

linux

  • linux_kernel

apple

  • macos

microsoft

  • windows
CWE
CWE-862

Missing Authorization