CVE-2024-8903
Sept. 26, 2024, 1:32 p.m.
Tags
CVSS Score
Product(s) Impacted
Acronis Cyber Protect Cloud Agent (Windows, macOS)
- before build 38565
Description
Local active protection service settings manipulation due to unnecessary privileges assignment. The following products are affected: Acronis Cyber Protect Cloud Agent (Windows, macOS) before build 38565.
Weaknesses
CWE-250
Execution with Unnecessary Privileges
The product performs an operation at a privilege level that is higher than the minimum level required, which creates new weaknesses or amplifies the consequences of other weaknesses.
CWE ID: 250Date
Published: Sept. 23, 2024, 9:15 a.m.
Last Modified: Sept. 26, 2024, 1:32 p.m.
Status : Awaiting Analysis
CVE has been recently published to the CVE List and has been received by the NVD.
More infoSource
security@acronis.com
CVSS Data
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
LOW
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
Base Score
Exploitability Score
Impact Score
Base Severity
MEDIUMCVSS Vector String
The CVSS vector string provides an in-depth view of the vulnerability metrics.
View Vector StringCVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N