CVE-2022-30990: Sensitive information disclosure due to insecure folder permissions
First published: Wed May 18 2022(Updated: )
Sensitive information disclosure due to insecure folder permissions. The following products are affected: Acronis Cyber Protect 15 (Linux) before build 29240, Acronis Agent (Linux) before build 28037
Credit: security@acronis.com security@acronis.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Acronis Cyber Protect | <15 | |
| Acronis Cyber Protect | =15 | |
| Acronis Cyber Protect | =15-update1 | |
| Acronis Cyber Protect | =15-update2 | |
| Acronis Cyber Protect | =15-update3 | |
| Linux Linux kernel | ||
| Microsoft Windows | ||
| Acronis Agent | <c21.10 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2022-30990?
CVE-2022-30990 is a vulnerability that leads to sensitive information disclosure due to insecure folder permissions in Acronis Cyber Protect 15 (Linux) before build 29240 and Acronis Agent (Linux) before build 28037.
Which products are affected by CVE-2022-30990?
Acronis Cyber Protect 15 (Linux) before build 29240 and Acronis Agent (Linux) before build 28037 are affected by CVE-2022-30990.
What is the severity of CVE-2022-30990?
CVE-2022-30990 has a severity rating of 7.5 (high).
How can CVE-2022-30990 be fixed?
To fix CVE-2022-30990, upgrade to Acronis Cyber Protect 15 (Linux) build 29240 or later, and Acronis Agent (Linux) build 28037 or later.
Where can I find more information about CVE-2022-30990?
You can find more information about CVE-2022-30990 in the Acronis Security Advisory at the following link: [https://security-advisory.acronis.com/advisories/SEC-2299](https://security-advisory.acronis.com/advisories/SEC-2299)
- collector/nvd-api
- collector/nvd-index
- agent/type
- agent/author
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/remedy
- agent/last-modified-date
- agent/references
- agent/severity
- agent/title
- agent/weakness
- agent/tags
- agent/description
- agent/first-publish-date
- agent/event
- vendor/acronis
- canonical/acronis cyber protect
- version/acronis cyber protect/15
- version/acronis cyber protect/15-update1
- version/acronis cyber protect/15-update2
- version/acronis cyber protect/15-update3
- vendor/linux
- canonical/linux linux kernel
- vendor/microsoft
- canonical/microsoft windows
- canonical/acronis agent