CVE-2023-41751
CVSS 3.1 Score 5.5 of 10 (medium)
Details
Published Aug 31, 2023
Updated: Sep 6, 2023
CWE ID 287
Summary
CVE-2023-41751 is a vulnerability affecting Acronis Agent for Windows before build 32047. This issue results in the disclosure of sensitive information due to a flaw in the token expiration validation process. The consequence is that expired tokens are not properly handled, leading to potential unauthorized access to protected data. Organizations utilizing Acronis Agent are advised to update to the latest build to mitigate this risk. Failure to address this vulnerability could result in confidential information being exposed to unintended recipients.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Share
Affected Products
- Acronis Agent
Affected Vendors
- Acronis International