CVE-2022-45458

Summary

Sensitive information disclosure and manipulation due to improper certification validation. The following products are affected: Acronis Agent (Windows, macOS, Linux) before build 29633, Acronis Cyber Protect 15 (Windows, macOS, Linux) before build 30984.

Affected Software

VendorProductVersion RangeStatus
AcronisAcronis Agentunspecified < 29633affected
AcronisAcronis Cyber Protect 15unspecified < 30984affected

Weaknesses

  • CWE-295: CWE-295

ADP Enrichment

CVE Program Container

Additional References

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References