CVE-2023-41751

CVSS 3.1 Score 5.5 of 10 (medium)

Details

Published Aug 31, 2023
Updated: Sep 6, 2023
CWE ID 287

Summary

CVE-2023-41751 is a vulnerability affecting Acronis Agent for Windows before build 32047. This issue results in the disclosure of sensitive information due to a flaw in the token expiration validation process. The consequence is that expired tokens are not properly handled, leading to potential unauthorized access to protected data. Organizations utilizing Acronis Agent are advised to update to the latest build to mitigate this risk. Failure to address this vulnerability could result in confidential information being exposed to unintended recipients.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • Acronis Agent

Affected Vendors

  • Acronis International