CVE-2023-44154
First published: Wed Sep 27 2023(Updated: )
Sensitive information disclosure and manipulation due to improper authorization. The following products are affected: Acronis Cyber Protect 15 (Linux, Windows) before build 35979.
Credit: security@acronis.com security@acronis.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Acronis Cyber Protect | <15 | |
| Acronis Cyber Protect | =15 | |
| Acronis Cyber Protect | =15-update1 | |
| Acronis Cyber Protect | =15-update2 | |
| Acronis Cyber Protect | =15-update3 | |
| Acronis Cyber Protect | =15-update4 | |
| Acronis Cyber Protect | =15-update5 | |
| Linux Linux kernel | ||
| Microsoft Windows |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2023-44154?
The severity of CVE-2023-44154 is critical with a severity value of 9.1.
Which products are affected by CVE-2023-44154?
The following products are affected by CVE-2023-44154: Acronis Cyber Protect 15 (Linux, Windows) before build 35979.
How can sensitive information be disclosed and manipulated due to improper authorization?
Sensitive information can be disclosed and manipulated due to improper authorization in Acronis Cyber Protect 15 (Linux, Windows) before build 35979.
How can I fix CVE-2023-44154?
To fix CVE-2023-44154, update Acronis Cyber Protect 15 (Linux, Windows) to build 35979 or later.
Where can I find more information about CVE-2023-44154?
More information about CVE-2023-44154 can be found at the following link: [https://security-advisory.acronis.com/advisories/SEC-2436](https://security-advisory.acronis.com/advisories/SEC-2436)
- collector/nvd-api
- collector/nvd-index
- agent/weakness
- agent/author
- agent/type
- agent/last-modified-date
- agent/first-publish-date
- agent/softwarecombine
- collector/epss-latest
- source/FIRST
- agent/severity
- agent/references
- agent/description
- agent/epss
- agent/event
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/acronis
- canonical/acronis cyber protect
- version/acronis cyber protect/15
- version/acronis cyber protect/15-update1
- version/acronis cyber protect/15-update2
- version/acronis cyber protect/15-update3
- version/acronis cyber protect/15-update4
- version/acronis cyber protect/15-update5
- vendor/linux
- canonical/linux linux kernel
- vendor/microsoft
- canonical/microsoft windows