Acronis Products Missing Authentication Vulnerability Leading to Sensitive Data Disclosure and Manipulation

A vulnerability allowing sensitive data disclosure and manipulation has been identified in multiple Acronis products, including Acronis Cyber Protect Cloud Agent (for Linux, macOS, and Windows) prior to build 39870, Acronis Cyber Protect 16 (for Linux, macOS, and Windows) prior to build 39938, and Acronis Cyber Protect 15 (for Linux, macOS, and Windows) prior to build 41800. This vulnerability arises from missing authentication, which could be exploited to access and manipulate sensitive information.

Impact

Exploitation of this vulnerability could lead to unauthorized access and manipulation of sensitive data.

Remediation

Users can update to Acronis Cyber Protect Cloud Agent update C25.03 hotfix 2, Acronis Cyber Protect 16 Update 4, or Acronis Cyber Protect 15 Update 7 to address this vulnerability.