CVE-2022-45458 : Sensitive information disclosure and manipulation due to improper certification validation. The following products are a

Sensitive information disclosure and manipulation due to improper certification validation. The following products are affected: Acronis Agent (Windows, macOS, Linux) before build 29633, Acronis Cyber Protect 15 (Windows, macOS, Linux) before build 30984.

Published 2023-05-18 10:15:10

Updated 2023-05-26 17:20:59

Source Acronis International GmbH

View at NVD, CVE.org

Exploit prediction scoring system (EPSS) score for CVE-2022-45458

EPSS FAQ

0.11%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 43 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2022-45458

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
4.2	MEDIUM	CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N	1.6	2.5	Acronis International GmbH
Attack Vector: Adjacent Network Attack Complexity: High Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: Low Integrity: Low Availability: None
7.5	HIGH	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N	3.9	3.6	NIST
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: High Integrity: None Availability: None

Products affected by CVE-2022-45458

Acronis » Cyber Protect
Versions before (<) 15
cpe:2.3:a:acronis:cyber_protect:*:*:*:*:*:*:*:*
Matching versions
When used together with: Apple » Macos » Version: N/A
When used together with: Linux » Linux Kernel » Version: N/A
When used together with: Microsoft » Windows » Version: N/A
Acronis » Cyber Protect » Version: 15
cpe:2.3:a:acronis:cyber_protect:15:-:*:*:*:*:*:*
Matching versions
When used together with: Apple » Macos » Version: N/A
When used together with: Linux » Linux Kernel » Version: N/A
When used together with: Microsoft » Windows » Version: N/A
Acronis » Cyber Protect » Version: 15 Update Update1
cpe:2.3:a:acronis:cyber_protect:15:update1:*:*:*:*:*:*
Matching versions
When used together with: Apple » Macos » Version: N/A
When used together with: Linux » Linux Kernel » Version: N/A
When used together with: Microsoft » Windows » Version: N/A
Acronis » Cyber Protect » Version: 15 Update Update2
cpe:2.3:a:acronis:cyber_protect:15:update2:*:*:*:*:*:*
Matching versions
When used together with: Apple » Macos » Version: N/A
When used together with: Linux » Linux Kernel » Version: N/A
When used together with: Microsoft » Windows » Version: N/A
Acronis » Cyber Protect » Version: 15 Update Update3
cpe:2.3:a:acronis:cyber_protect:15:update3:*:*:*:*:*:*
Matching versions
When used together with: Apple » Macos » Version: N/A
When used together with: Linux » Linux Kernel » Version: N/A
When used together with: Microsoft » Windows » Version: N/A
Acronis » Cyber Protect » Version: 15 Update Update4
cpe:2.3:a:acronis:cyber_protect:15:update4:*:*:*:*:*:*
Matching versions
When used together with: Apple » Macos » Version: N/A
When used together with: Linux » Linux Kernel » Version: N/A
When used together with: Microsoft » Windows » Version: N/A
Acronis » Agent
Versions before (<) c22.05
cpe:2.3:a:acronis:agent:*:*:*:*:*:*:*:*
Matching versions
When used together with: Apple » Macos » Version: N/A
When used together with: Linux » Linux Kernel » Version: N/A
When used together with: Microsoft » Windows » Version: N/A

Vulnerability Details : CVE-2022-45458

Exploit prediction scoring system (EPSS) score for CVE-2022-45458

CVSS scores for CVE-2022-45458

CWE ids for CVE-2022-45458

References for CVE-2022-45458

Products affected by CVE-2022-45458