CVE-2023-41744
Assigner: Acronis
Published: 2023-08-31T15:14:13.720Z
State: PUBLISHED
problemTypes: descriptions: cweId: CWE-347
description: CWE-347
type: CWE
affected: vendor: Acronis
product: Acronis Agent
platforms: macOS
versions: version: unspecified
status: affected
lessThan: 30600
versionType: semver
defaultStatus: unaffected
vendor: Acronis
product: Acronis Cyber Protect 15
platforms: macOS
versions: version: unspecified
status: affected
lessThan: 35979
versionType: semver
defaultStatus: unaffected
descriptions: value: Local privilege escalation due to unrestricted loading of unsigned libraries. The following products are affected: Acronis Agent (macOS) before build 30600, Acronis Cyber Protect 15 (macOS) before build 35979.
credits: value: @vkas-afk (https://hackerone.com/vkas-afk)
type: finder
metrics: format: CVSS
scenarios: value: GENERAL
cvssV3_0: version: 3.0
baseScore: 7.8
baseSeverity: HIGH
vectorString: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H