ByteOS Network

Vulnerability Details :

CVE-2023-44154

Assigner Org ID-73dc0fef-1c66-4a72-9d2d-0a0f4012c175

Published At-27 Sep, 2023 | 12:00

Updated At-23 Sep, 2024 | 19:26

Sensitive information disclosure and manipulation due to improper authorization. The following products are affected: Acronis Cyber Protect 15 (Linux, Windows) before build 35979.

EPSS History

Score

Latest Score

N/A

Percentile

Latest Percentile

N/A

▼Common Vulnerabilities and Exposures (CVE)

cve.org

Assigner:Acronis

Assigner Org ID:73dc0fef-1c66-4a72-9d2d-0a0f4012c175

Published At:27 Sep, 2023 | 12:00

Updated At:23 Sep, 2024 | 19:26

▼CVE Numbering Authority (CNA)

Sensitive information disclosure and manipulation due to improper authorization. The following products are affected: Acronis Cyber Protect 15 (Linux, Windows) before build 35979.

Affected Products

Vendor

Acronis (Acronis International GmbH)

Product

Acronis Cyber Protect 15

Platforms

Linux
Windows

Default Status

unaffected

Versions

Affected

From unspecified before 35979 (semver)

Problem Types

Type	CWE ID	Description
CWE	CWE-639	CWE-639

Type: CWE

CWE ID: CWE-639

Description: CWE-639

Metrics

Version	Base score	Base severity	Vector
3.0	4.6	MEDIUM	CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N

Version: 3.0

Base score: 4.6

Base severity: MEDIUM

Vector:

CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N

References

Hyperlink	Resource
https://security-advisory.acronis.com/advisories/SEC-2436	vendor-advisory

Hyperlink: https://security-advisory.acronis.com/advisories/SEC-2436

Resource:

vendor-advisory

▼Authorized Data Publishers (ADP)

1. CVE Program Container

References

Hyperlink	Resource
https://security-advisory.acronis.com/advisories/SEC-2436	vendor-advisory x_transferred

Hyperlink: https://security-advisory.acronis.com/advisories/SEC-2436

Resource:

vendor-advisory

x_transferred

2. CISA ADP Vulnrichment

Metrics Other Info

▼National Vulnerability Database (NVD)

nvd.nist.gov

Source:security@acronis.com

Published At:27 Sep, 2023 | 15:19

Updated At:26 Oct, 2023 | 20:08

Sensitive information disclosure and manipulation due to improper authorization. The following products are affected: Acronis Cyber Protect 15 (Linux, Windows) before build 35979.