HIGH✓ PATCH🇵🇱 Wersja polska

CVE-2023-2360

CVSS 7.5v3.1pub. 2023-04-28upd. 2024-11-21

Sensitive information disclosure due to CORS misconfiguration. The following products are affected: Acronis Cyber Infrastructure (ACI) before build 5.2.0-135.

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Acronis Cyber Infrastructure
APP
Acronis
< 5.2.0-135

🟢

PATCH AVAILABLE

Vendor update available. Deploy in standard maintenance cycle.

CWE

CWE-942

NVD-CWE-noinfo

References

security-advisory.acronis.com/advisories/SEC-4215…

Related vulnerabilities

CVE-2023-45249CRITICAL9.8⚠ KEVPL ✓ten sam produkt

RCE w Acronis Cyber Infrastructure — użycie domyślnych haseł

CVE-2023-2782MEDIUM5.5ten sam produkt

Sensitive information disclosure due to improper authorization. The following products are affected: Acronis C...

CVE-2026-28710CRITICAL9.8PL ✓ten sam vendor

Ujawnienie danych i manipulacja przez nieprawidłowe uwierzytelnianie w Acronis Cyber Protect 17

CVE-2025-30412CRITICAL10.0PL ✓ten sam vendor

Acronis Cyber Protect — ujawnienie i manipulacja danych przez błąd uwierzytelniania

CVE-2025-30411CRITICAL10.0PL ✓ten sam vendor

Acronis Cyber Protect — krytyczna luka uwierzytelnienia (CVSS 10.0)