CVE-2022-45454

Summary

Sensitive information disclosure due to insecure folder permissions. The following products are affected: Acronis Agent (Windows) before build 30161, Acronis Cyber Protect 15 (Windows) before build 30984.

Affected Software

VendorProductVersion RangeStatus
AcronisAcronis Agent0 < 30161affected
AcronisAcronis Cyber Protect 150 < 30984affected

Weaknesses

  • CWE-200: CWE-200

ADP Enrichment

CVE Program Container

Additional References

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References