Vulnerabilities > CVE-2023-45246 - Missing Authorization vulnerability in Acronis Agent

CVSS 7.1 - HIGH

Attack vector

LOCAL

Attack complexity

LOW

Privileges required

LOW

Confidentiality impact

HIGH

Integrity impact

HIGH

Availability impact

NONE

local

low complexity

acronis

CWE-862

NVD

Published: 2023-10-06

Updated: 2024-09-23

Summary

Sensitive information disclosure and manipulation due to missing authorization. The following products are affected: Acronis Cyber Protect Cloud Agent (Linux, macOS, Windows) before build 36343.

Vulnerable Configurations

Part	Description	Count
Application	Acronis Acronis Agent - Acronis Agent C21.03 Acronis Agent C21.06 Acronis Agent C21.07 Acronis Agent C21.09 Acronis Agent C21.10 Acronis Agent C21.12 Acronis Agent C22.02 Acronis Agent C22.03 Acronis Agent C22.05 Acronis Agent C22.07 Acronis Agent C22.08 Acronis Agent C22.09 Acronis Agent C22.10 Acronis Agent C22.11 Acronis Agent C23.02 Acronis Agent C23.03 Acronis Agent C23.05 Acronis Agent C23.06 Acronis Agent C23.07 Acronis Agent C23.08	21
OS	Apple Apple Macos -	1
OS	Linux Linux Linux Kernel -	1
OS	Microsoft Microsoft Windows -	1

Common Weakness Enumeration (CWE)

CWE-862 - Missing Authorization

References

https://security-advisory.acronis.com/advisories/SEC-5903