CVE-2023-41749

Published: Aug 31, 2023Modified: Jun 17, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

Sensitive information disclosure due to excessive collection of system information. The following products are affected: Acronis Agent (Windows) before build 32047, Acronis Cyber Protect 15 (Windows) before build 35979.

Affected (7)

Products: Acronis: Agent, Cyber Protect

Acronis

2 products

Agent

Cyber Protect

Configuration A

7 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Acronis Agent	Before c23.03
Acronis Cyber Protect	Version 15
Acronis Cyber Protect	Version 15 update1
Acronis Cyber Protect	Version 15 update2
Acronis Cyber Protect	Version 15 update3
Acronis Cyber Protect	Version 15 update4
Acronis Cyber Protect	Version 15 update5

Running on/with	Platform Versions
Microsoft Windows	All versions

Related CWEs

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (2)

https://security-advisory.acronis.com/advisories/SEC-5287

Source: security@acronis.com

Vendor Advisory

https://security-advisory.acronis.com/advisories/SEC-5287

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.