CVE-2022-30995

Published: May 3, 2023Modified: Jun 17, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

Sensitive information disclosure due to improper authentication. The following products are affected: Acronis Cyber Protect 15 (Windows, Linux) before build 29486, Acronis Cyber Backup 12.5 (Windows, Linux) before build 16545.

Affected (19)

Products: Acronis: Cyber Backup, Cyber Protect

Acronis

2 products

Cyber Backup

Cyber Protect

Configuration A

19 vulnerable · 2 platform

Vulnerable Software	Affected Versions
Acronis Cyber Backup	Version 12.5
Acronis Cyber Backup	Version 12.5 10130
Acronis Cyber Backup	Version 12.5 10330
Acronis Cyber Backup	Version 12.5 11010
Acronis Cyber Backup	Version 12.5 13160
Acronis Cyber Backup	Version 12.5 13400
Acronis Cyber Backup	Version 12.5 14280
Acronis Cyber Backup	Version 12.5 14330
Acronis Cyber Backup	Version 12.5 16180
Acronis Cyber Backup	Version 12.5 16318
Acronis Cyber Backup	Version 12.5 16327
Acronis Cyber Backup	Version 12.5 7641
Acronis Cyber Backup	Version 12.5 7970
Acronis Cyber Backup	Version 12.5 8850
Acronis Cyber Backup	Version 12.5 9010
Acronis Cyber Protect	Version 15
Acronis Cyber Protect	Version 15 update1
Acronis Cyber Protect	Version 15 update2
Acronis Cyber Protect	Version 15 update3

Running on/with	Platform Versions
Linux Linux Kernel	All versions
Microsoft Windows	All versions

Related CWEs

CWE-287

Improper Authentication

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

References (2)

https://security-advisory.acronis.com/advisories/SEC-3855

Source: security@acronis.com

Vendor Advisory

https://security-advisory.acronis.com/advisories/SEC-3855

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.