Vulnerability · Published Aug 31, 2023 · Assigned by Acronis
CVE-2023-41747
Medium 6.5
In plain English
A medium-severity path traversal in Acronis Cloud Manager from Acronis. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 35% of all known vulnerabilities).
Severity (CVSS 3.0)6.5Medium
Exploit odds (30 days)0.4%top 64.9% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
Sensitive information disclosure due to unauthenticated path traversal. The following products are affected: Acronis Cloud Manager (Windows) before build 6.2.23089.203.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Acronis | Acronis Cloud Manager | unspecified – before 6.2.23089.203 |
Weakness: CWE-22 · Vector: CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
References
- SEC-5811 vendor-advisory