Acronis Cyber Protect and Acronis Cyber Protect Cloud Agent Sensitive Information Disclosure Vulnerability

A vulnerability allowing sensitive information disclosure and manipulation has been identified in Acronis Cyber Protect 17 and Acronis Cyber Protect Cloud Agent. This issue arises from insufficient authorization checks and affects multiple platforms, including Linux, macOS, and Windows. Acronis Cyber Protect 17 is vulnerable in versions prior to build 41186, while Acronis Cyber Protect Cloud Agent is affected in versions prior to build 41124.

Impact

Exploitation of this vulnerability could lead to unauthorized disclosure and manipulation of sensitive information.

Remediation

Users can update to Acronis Cyber Protect 17 build 41186 or Acronis Cyber Protect Cloud Agent build 41124 to address this vulnerability.