CVE-2024-34012

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-34012
Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis Cloud Manager (Windows) before build 6.2.24135.272.

4.4 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 2.5

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact LOW

Availability Impact NONE

Scope UNCHANGED

References
Link Resource
https://security-advisory.acronis.com/advisories/SEC-5758 Vendor Advisory
https://security-advisory.acronis.com/advisories/SEC-5758 Vendor Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:acronis:cloud_manager:*:*:*:*:*:windows:*:*
History

21 Nov 2024, 09:17

Type Values Removed Values Added
References () https://security-advisory.acronis.com/advisories/SEC-5758 - Vendor Advisory () https://security-advisory.acronis.com/advisories/SEC-5758 - Vendor Advisory

07 Aug 2024, 15:33

Type Values Removed Values Added
References () https://security-advisory.acronis.com/advisories/SEC-5758 - () https://security-advisory.acronis.com/advisories/SEC-5758 - Vendor Advisory
First Time Acronis
Acronis cloud Manager
CPE cpe:2.3:a:acronis:cloud_manager:*:*:*:*:*:windows:*:*

17 Jun 2024, 12:42

Type Values Removed Values Added
Summary
  • (es) Escalada de privilegios locales debido a permisos de carpetas inseguros. Los siguientes productos se ven afectados: Acronis Cloud Manager (Windows) anterior a la compilación 6.2.24135.272.

14 Jun 2024, 10:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-06-14 10:15

Updated : 2024-11-21 09:17

NVD link : CVE-2024-34012

Mitre link : CVE-2024-34012

CVE.ORG link : CVE-2024-34012

JSON object : View

Products Affected

acronis

  • cloud_manager
CWE
CWE-276

Incorrect Default Permissions