Acronis Cyber Protect Sensitive Data Disclosure and Manipulation Vulnerability

A vulnerability allowing sensitive data disclosure and unauthorized manipulation has been identified in Acronis Cyber Protect versions 16 (Linux, Windows) prior to build 39938 and version 15 (Linux, Windows) prior to build 41800. This issue arises from missing authorization, which could potentially be exploited to access or alter sensitive information.

Impact

Exploitation of this vulnerability could lead to unauthorized access to sensitive data and the ability to manipulate that data, potentially causing further harm depending on the nature of the information involved.

Remediation

Users can update to Acronis Cyber Protect 16 Update 4 or Acronis Cyber Protect 15 Update 7 to address this vulnerability.