NetSight
high8.8

CVE-2022-3405

Code execution and sensitive information disclosure due to excessive privileges assigned to Acronis Agent.

Impact

Code execution and sensitive information disclosure due to excessive privileges assigned to Acronis Agent. The following products are affected: Acronis Cyber Protect 15 (Windows, Linux) before build 29486, Acronis Cyber Backup 12.5 (Windows, Linux) before build 16545.

Affected products

VendorProductAffected versions
AcronisCyber Backup
Version 12.5
AcronisCyber Protect
Version 15

Weakness classification

References